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PREFACE 



The prerequisites for this book are the “standard” first-semester course 
in number theory (with incidental elementary algebra) and elementary 
calculus. There is no lack of suitable texts for these prerequisites (for 
example, An Introduction to the Theory of Numbers^ by I. Niven and H. S. 
Zuckerman, John Wiley and Sons, 1960, can be cited as a book that intro- 
duces the necessary algebra as part of number theory). Usually, very little 
else can be managed in that first semester beyond the transition from 
improvised combinatorial amusements of antiquity to the coherently 
organized background for quadratic reciprocity, which was achieved in 
the eighteenth century. 

The present text constitutes slightly more than enough for a second- 
semester course, carrying the student on to the twentieth century by 
motivating some heroic nineteenth-century developments in algebra and 
analysis. The relation of this textbook to the great treatises will necessarily 
be like that of a historical novel to chronicles. We hope that once the 
student knows what to seek he will find “chronicles” to be as exciting as a 
“historical novel.” 

The problems in the text play a significant role and are intended to 
stimulate the spirit of experimentation which has traditionally ruled 
number theory and which has indeed become resurgent with the realization 
of the modern computer. A student completing this course should acquire 
an appreciation for the historical origins of linear algebra, for the zeta- 
function tradition, for ideal class structure, and for genus theory. These 




VI 
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ideas, although relatively old, still make their influence felt on the frontiers 
of modern mathematics. Fermat’s last theorem and complex multiplication 
are unfortunate omissions, but the motive was not to depress the degree 
of difliculty so much as it was to make the most efficient usage of one 
semester. 

My acknowledgments are many and are difficult to list. I enjoyed the 
benefits of courses under Bennington P. Gill at City College and Saunders 
MacLane at Harvard. The book profited directly from suggestions by my 
students and from the incidental advice of many readers, particularly 
Burton W. Jones and Louis J. Mordell. I owe a special debt to Herbert S. 
Zuckerman for a careful reading, to Gordon Pall for major improvements, 
and to the staff of John Wiley and Sons for their cooperation. 

Harvey Cohn 

Tucson, Arizona 

October 1961 
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INTRODUCTORY 

SURVEY 



DIOPHANTINE EQUATIONS 

The most generally enduring problem of number theory is probably that 
of diophantine equations. Greek mathematicians were quite adept at 
solving in integers x and y the equation 

ax + by c, 

where a, b, and c are any given integers. The close relation with the greatest 
common divisor algorithm indicated the necessity of treating unique 
factorization as a primary tool in the solution of diophantine equations. 

The Greek mathematicians gave some sporadic attention to forms of the 
more general equation 

(1) y) == + Cy^ + Dx + Ey F == 0, 

but achieved no sweeping results. They probably did not know that every 
equation of this kind can be solved “completely” by characterizing all 
solutions in a finite number of steps, although they had success with special 
cases such as = 1. In fact, they used continued fraction tech- 

niques in both linear and quadratic problems, indicating at least esthetically 
a sense of unity. About 1750 Euler and his contemporaries became aware 



This section presupposes some familiarity with elementary concepts of group, 
congruence, Euclidean algorithm, and quadratic reciprocity (which are reviewed in 
Chapter I). 
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2 INTRODUCTORY SURVEY 

of the systematic solvability in a finite number of steps. Yet it was not 
until 1800 that Gauss gave in his famous Disquisitiones Arithmeticae the 
solution that still remains a model of perfection. 

Now a very intimate connection developed between Gauss’s solution and 
quadratic reciprocity, making unique factorization (in the linear case) and 
quadratic reciprocity (in the quadratic case) parallel tools. Finally, about 
1896, Hilbert achieved the reorganization of the quadratic theory, making 
full use of this coincidence and thus completing the picture. 



MOTIVATING PROBLEM IN QUADRATIC FORMS 

The first step in a general theory of quadratic diophantine equations was 
probably the famous theorem of Fermat (1640) relating to a (homogeneous) 
quadratic form in x, y. 

A prime number p is representable in an essentially unique manner by the 
form + y^for integral x and y if and only if p = I modulo 4{orp = 2). 

It is easily verified that 2 = P + 1^, 5 = 2^ -h P, 13 = 3^ + 2\ 17 = 
4^ -H 29 = 5^ + etc., whereas the primes 3, 7, 11, 19, etc., have no 
such representation. The proof of Fermat’s theorem is far from simple and 
is achieved later on as part of a larger result. 

At the same time, Fermat used an identity from antiquity : 

(x^ + 2/2 )(x '2 -(- 3^'2) = (xx' - yy'f -f {xy' + xy)\ 

easily verifiable, since both sides equal x^x'^ + y^'^ + x'^y^ + x^'^. He 
used this formula to build up solutions to the equation 

(2) + t/2 = w 

for values of m which are not necessarily prime. For example, from the 
results 

32 + 22 = 13, (x = 3, 2/ = 2), 

22 + 12 = 5, (x' = 2, y' = 1), 

we obtain 

72 + 42 = 65, {xx' - yy' = 4, xy' + x'y = 7). 

If we interpret the representation for 13 as 

(_3)2 + 22 = 13 (x = -3, y - 2), 

whereas 

22 + 12 = 5, (x' = 2, y'= 1), 

then we obtain 



(—8)2 + 12 = 65, (xx' — yy' = —8, xy' + x'y = 1); 
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but the reader can verify that 65 = 7^ + 4^ = 8^ + are the only repre- 
sentations obtainable for 65 in the form to within rearrangements 

of summands or changes of sign. If we allow the trivial additional oper- 
ation of using {x^ y), which are not relatively prime {{kx)^ + {ky)^ = k^m), 
we can build up all solutions to (2), from those for prime m. 

Thus Fermat’s result, stated more compactly, is the following: 

Let Q{x, y) = x^ 

Then all relatively prime solutions (x, y) to the problem of representing 

Q{x, y) = m 

for m any integer are achieved by means of the successive application of two 
results called genus and composition theorems, 

GENUS THEOREM 

(3) Q{x, y)=p 

can be solved in integral x, y for p a prime if and only if p = \ (mod 4), or 
p = 2, The representation is unique^ except for obvious changes of sign or 
rearrangements of x and y. 

COMPOSITION THEOREM 

(4) Q{x, y) Q(x\ y') = Q(xx' - yy\ xy + xf). 

In the intervening years until about 1800, Euler, Lagrange, Legendre, 
and others invented analogous results for a variety of quadratic forms. 
Gauss (1800) was the first one to see the larger problem and to achieve a 
complete generalization of the genus and composition theorems. The 
main result is too involved even to state here, but a slightly more difficult 
special result will give the reader an idea of what to expect. (See Chapter 
XIII.) 

Let Qi{x, y) = x"^ -y 5y^, 

y) = + 2xy -|- 3y\ 

Then all relatively prime solutions {x, y) to the problem of representing 

y) = m 
or 

y) = tn 
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for m any integer are achieved by means of the successive application of the 
following two results. 

GENUS THEOREM 

(5) y) =, a prime, if and only if p ^ I ^ I (mod 20), 

VU \3, 7/ 

in an essentially unique fashion. (The only special exceptions are, Qi(0, 1) = 
5, 02(1, 0) = 2.) 

COMPOSITION THEOREM 

' y) y') = - ^yy\ ^'y + ^y') 

(6a) - 0i(a:, y) Qf^x\ y') = Q^ixx' - x'y - 3yy\ xy' + 2x'y + yy') 

^ y) y’) = + ^y' + ^'y - ^yy\ ^y' + + yy')- 

One may protest (in vain) that he is interested only in Qfx, y\ but it is 
impossible to separate Q^{x, y) and 02 (^, y) in the composition process 
For instance, 

02(1,1) = 7, (x= 1, y=\\ 

02 ( 0 , 1 ) = 3, (a:' = 0 , 2 /'= 1 ), 

and, from the last of the composition formulas, 

0i(-l, 2) = 21, {Ixx' + xf + x'y - lyf = -1, xf + x'y + yy' = 2). 

Thus, to represent 21 by 0i, we are forced to consider possible repre- 
sentations of factors of 21 by 02. The reader may find the following 
exercise instructive along these lines: 

Find a solution to Qfx, y) = 29 by trial and error and build from the 
preceding results solutions to Qfx, y) = 841 and 02(^*^, y) = 203. 

Those readers who are familiar with the concept of a group will recognize 
system (6a) symbolically as 

Qi^ = Qi (identity), 

(6b) ' Q 1 Q 2 = Qsj 

. Q2 ^ = Qi. 



In this manner we are led from quadratic forms into algebra ! 
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The reader will probably note that the decomposition theorem resembles 
the method of multiplication of complex numbers : 

(7a) (x + iy)(x' + iy') = (xx - yy') + i(xy' + yx'), 

where, of course, i = V —\. The composition theorems for Qi(x, y) and 
02 (x, y) can be similarly explained by use of V— 5 if we solve for x" and y" 
in each of the following equations : 



(x + V—5y)(x' + V—5y) = (x" + V—5y'% 

(7b) -{ (x + V-5y)(2x' + y' V-5y) = (2x'" + / + V—5y") 
(2x + y V—5y)(2x' + t/' + V-5y) = 2(x- + V-5y"), 



but we shall defer all details to Chapter XIII. 

The important point, historically, is that before the time of Gauss 
mathematicians strongly feared the possibility of developing a contradic- 
tion if reliance was placed on such numbers as V— 1 , V— 5, and they 
would use these numbers “experimentally,” although their final proofs 
were couched in the immaculate language of traditional integral arithmetic; 
yet eventually they had to accept radicals as a necessary simplifying device. 

A second guiding influence in the introduction of radicals was the famous 
conjecture known as Fermat's last theorem : 

If n is an integer >3, the equation 



y^ z” 



has no solution in integers (x, y, z), except for the trivial case in which 
xyz:=0. The result is still not proved for all «, nor is it contradicted. 
Here Cauchy, Kummer, and others achieved, for special n, remarkable 
results by factoring the left-hand side. We shall ignore this very important 
development in order to unify the material, but we cannot fail to see its 
relevance (say) for « = 3, if we write 

= (x + y){y + py)(x + p^y), 

p = (-1 + V^)/2, p'^ = {-\- V^)/2. 

The introduction of such numbers as p,V —l,V — 5 resulted in a further 
development by Dedekind (1870) of a systematic theory of algebraic 
numbers. These are quantities a defined by equations, for instance, of 
degree k, 

AqOl^ -f- * * * + >4^ = 0 
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with integral coefficients. It turned out that quadratic surds (A: = 2) were 
an extremely significant special case whose properties to this very day are 
not fully generalized to k > 2. Thus the importance of this special 
(quadratic) case cannot be overestimated in the theory of algebraic numbers 
of arbitrary degree 

In this book we try to get the best of both worlds : we use quadratic 
forms with integral coefficients or factor the forms (using algebraic number 
theory), depending on which is more convenient. 



PRIMES IN ARITHMETIC PROGRESSION 

If we examine Qi{x, y) and y) more carefully, we find that in both 
cases the discriminant is “20, (the discriminant is the usual value, d = 
-- A AC for the form Ax^ + Bocy + Cy^). Actually, the number of 
forms required for a complete composition theorem associated with a 
discriminant is (essentially) a very important integer called the class 
number, written h{d). Thus, referring to Q{x, y), we find A(— 4) ^ 1 ; and 
referring to Qi{x^ y)^ y), we find /z(“20) = 2. The value of the class 

number is one of the most irregular functions in number theory. Gauss 
(1800) and Dirichlet (1840), however, did obtain “exact” formulas for the 
class number. They used continuous variables andthelimiting processes of 
calculus, or the tools of analysis. 

One of the most startling results in number theory developed when 
Dirichlet used this class-number formula to show the following result: 

There is an infinitude of primes in any arithmetic progression 

a,ja d^ a 2d, a -|- 3^/, * * * , 
provided {a, ^/) = 1, and ^/ > 0. 

The fact that quadratic forms had originally provided the clue to a 
problem involving the linear form a A- xd has not been completely assimi- 
lated even today. Despite the occurrence of “direct” demonstrations of 
the result of Dirichlet, the importance of the original ideas is manifest in 
the wealth of unsolved related problems in algebraic number theory. 

We are thus concerned with the remarkable interrelation between the 
theory of integers and analysis. The role of number theory as a fountain- 
head of algebra and analysis is the central idea of this book. 




chapter 1 

Review of elementary number 
theory and group theory 



NUMBER THEORETIC CONCEPTS 
1. Congruence 

We begin with the concept of divisibility. We say^ a divides b if there is 
an integer c such that b = ac. If a divides b, we write a | and if a does 
not divide b we write a ^ b. If A: > 0 is an integer for which | b but 
0 *"+^ < b, we write || 6, which we read as divides b exactly.” 

If /M I (a; — y), we write 

( 1 ) x^y{mo^m) 

and say that x is congruent to y modulo m. The quantity m is called the 
modulus, and all numbers congruent (or equivalent) to x (mod m) are said 
to constitute a congruence (or equivalence) class. Congruence classes are 
preserved under the rational integral operations, addition, subtraction, and 
multiplication; or, more generally, from the congruence (1) we have 

(2) f (x) = f(y) (mod m) 

where f(x) is any polynomial with integral coefficients. 

^ Lower case italic letters denote integers (positive, negative, or zero), unless otherwise 
stated. 



9 




10 



ELEMENTARY NUMBER AND GROUP THEORY [Ch. I] 



2. Unique Factorization 

It can be shown that any two integers a and b not both 0 have a greatest 
common divisor d(>0) such that if / 1 a and t \ b then t [ d, and conversely, 
if t is any integer (including d) that divides d, then 1 1 a and 1 1 b. We write 
d — gcd (a, b)ord=^ (a, b). It is more important that for any a and b there 
exist two integers x and y such that 

(1) ax + by = d. 

If d = (a, b) = 1, we say a and b are relatively prime. 

One procedure for finding such integers r, y is known as the Euclidean 
algorithm. (This algorithm is referred to in Chapter VI in another con- 
nection, but it is not used directly in this book.) 

We make more frequent use of the division algorithm, on which the 
Euclidean algorithm is based : if a and b are two integers {b ^ 0), there 
exists a quotient q and a remainder r such that 

(2) a = qb + r 
and, most important, a = r(mod b) where 

(3) 0 < r < \bl 

The congruence classes are accordingly called residue (remainder) classes. 

From the foregoing procedure it follows that if {a, m) = 1 then an 
integer x exists such that (x, m) = 1 and ax = b (mod m). From this it 
also follows that the symbol bja (mod m) has integral meaning and may be 
written as x if {a, am) = 1 . 

An integer p greater than 1 is said to be a prime if it has no positive 
divisors except p and 1. The most important result of the Euclidean 
algorithm is the theorem that if the prime p is such that p | ab then p\a or 
p I b. Thus, by an elementary proof, any nonzero integer m is representable 
in the form 

(4) AM= ±p^^W^--pt\ 

where the p^ are distinct primes. The representation is unique within 
rearrangement of factors. Each factor is called primary. 

EXERCISE 1 . Observe that 

i + i - f 

\= A, J s 5. f = 2 (mod 7), 

4+5=2 (mod 7). 

Write down and prove a general theorem enabling us to use ordinary arithmetic 
to work with fractions modulo m (if the denominators are prime to am). 
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p-l 

EXERCISE 2. Prove I /x =0 (mod p), (p odd). 

EXERCISE 3. From the remarkable coincidence 2^ + 5^ = 2’ ♦ 5 + 1 = 641 
show 2®^ + 1 =0 (mod 641). Hint, Eliminate y between the pair of equations 
+ 1 =0 and carry the operations over to integers (mod 641). 
EXERCISE 4. Write down and prove the theorem for the solvability or non- 
solvability of ax ^ b (mod m) when (a, m) > 1. 

3. The Chinese Remainder Theorem 

If m = rs where r > 0, ^ > 0, then every congruence class modulo m 
corresponds to a unique pair of classes in a simple way, i.e., if x = y 
(mod m), then x = y (mod r) and x = y (mod j). If (r, s) = I, the converse 
is also true; every pair of residue (congruence) classes modulo r and 
modulo s corresponds to a single residue class modulo rs. This is called 
the Chinese remainder theorem.^ One procedure for defining an x such 
that X = a (mod r) and x = b (mod s) uses the Euclidean algorithm, since 
(x =)a + rt = b su constitutes an equation in the unknowns t and w, 
as in (1) of §2. 

As a result of this theorem, if we want to solve the equation 

(1) /(a:) = 0 (mod m), 

all we need do is factor m = * * */?/* and then solve each of the 

equations 

(2) /(x)^0(mod/-,“0 

for as many roots as occur (possibly none). If x^ is a solution to (2), we 
apply the Chinese remainder theorem step-by-step to solve simultaneously 
the equations 

(3) x = (mod /?/•), (' = 1, 2, • • • , i), 

to obtain a solution to (1). If Vi is the number of incongruent solutions to 

S 

(2), there will be incongruent solutions. (The result is true even if 

1=1 

one or more = 0.) 

EXERCISE 5. In a game for guessing a person’s age x, one discreetly requests 
three remainders : ri when x is divided by 3, when x is divided by 4, and when 
X is divided by 5. Then 

X = 40/*! + 45^2 + 36^3 (mod 60). 

Discuss the process for the determination of the integers 40, 45, 36. 

^ The theorem was not handed down from China but was found to have also been 
known there since antiquity. 
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4. Structure of Reduced Residue Classes 

A residue class modulo m will be called a reduced residue class (mod m) if 
each of its members is relatively prime to m. If m = 

(prime factorization), then any number x relatively prime to m may be 
determined modulo m by equations of the form 

(1) x = x^ (mod /?i) = 1, (/ = 1, 2, • • • , 5). 

The number of reduced residue classes modulo is given by the Euler (f> 
function : 

( 2 ) = 

By the Chinese remainder theorem the number of reduced residue classes 
modulo m is <f>(ni), where 

(3) <f>{m) =fl <KPt‘) = m[l - (l/pi)][l - (I/P 2 )] • ■ • [1 - (1/P,)]- 
By the Fermat-Euler theorem, if {b, m) = then 

(4) = 1 (mod m). 

A number ^ is a primitive root of m if 

(5) ^ 1 (mod m) for 0 < /: < 

Only the numbers m = 2/?®, 2, and 4 have primitive roots (where p is 

an odd prime). But then, for such a value of w, all y relatively prime to p 
are representable as 

(6) y =g^ (mod m\ 

where t takes on all <f>{m) values; ^ = 0, 1, 2, • • • , <^(m) — 1. 

The accompanying tables (see appendix) give the minimum primitive 
root g for such prime /? < 100 and represent y in terms of t and t in terms 
of y modulo p. Generally, t is called the index (abbr. I in the tables) and y is 
the number (abbr. N). Of course, the index is a value modulo </>(/«), and 
the operation of the index recalls to mind elementary logarithms. 

EXERCISE 6. Verify the index table modulo 19 and solve 
2102^60 = 1470 (jYiod 19) 

by writing 

10 ind 2+60 ind y ^10 ind 14 (mod 18) 

(and using Exercise 4, etc.). 
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5, Residue Classes for Prime Powers^ 

In the case of an odd prime power for a fixed base p, a single value g 
can be found that will serve as a primitive root for all exponents a > 1. 
In fact, g need be selected to serve only as the primitive root of />^, or, even 
more simply, as shown in elementary texts, g can be any primitive root of/? 
with just the further property ^ 1 (mod We then take (6) of §4 to 
represent an arbitrary reduced residue class y (mod p% using the minimum 
positive g for definiteness. 

In the case of powers of 2, the situation is much more complicated. The 
easy results are (taking odd y) for different powers of 2 

(1) y = I (mod 2), trivially, 

(2) y = {- 1)'" (mod 4), fo = 0, 1 ; 

but for odd y, modulo 8, we find there is no primitive root. Thus there is 
no way of writing all odd y = g^ (mod 8) for / = 0, 1, 2, 3. We must write 

(3) y = (mod 8), ?o = 0. U = 0, 1, 

yielding the following table of all odd y modulo 8. 

TABLE 1 



2/1357 

/o 0 1 0 1 

/i 0 1 1 0 



More generally, if we consider residues modulo 2®, a ^ 3, we find the 
odd y are accounted for by 

(4) y = (-iyoy^(mod 2«); /o = 0, 1 ; = 0, 1, • • • , (2“/4) - 1. 

This result makes 5 a kind of “half-way” primitive root modulo T for 
each > 3. For instance = 1 (mod T) when = <f>(2^)l2 = 2®/4 but 
for no smaller positive value of /j. Let us collect these remarks: 

If we factor m = P\^p^^ ' ' ' \ cind if (y^ /??) = 1, then y is uniquely 

determined by a set of exponents as follows: for odd primes p^ with primitive 
root gi {modpf). 

(5a) y = gf‘ (mod/)/0, 0 ^ 

^ In this section and those that follow the proofs are less elementary than before. 
The reader should not hesitate to consult some elementary text in the bibliography if the 
desired conclusion does not sound familiar. 
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If there is an even prime present call it /»i(= 2). Then if a^ =l all y are 
congruent to one another {mod 2), if a^ — 2, 

(5b) y = (— ly® (mod 4), 0 < ?o < ^{^) — 2; 

and if a^> 2 

(5c) y = (-lyoS'i (mod 2*0, 0<^o<2; 0<^< ^(2«0/2. 

The index of y in general is not an exponent but an ordered w-tuple^ of 
exponents or a vector.^ If we assume the primitive roots in (5a) are fixed 
for each odd p^ as the minimum positive value, we can write 

(6) ind {y) = [/q, ^i, ^ J, 

where each t^ is taken modulo the value f{pt")y or 2, or |^(2®i), as required 
by (5a), (5^), and (5c). 

Thus, if m = 17, we represent y = (mod 17), and 

(7a) ind {y) = [/j], {t^ determined modulo 16). 

Here the vector is merely the index. On the other hand, if w = 24 = 2^ • 3, 
we write 

ijb) y = 2^2 (mod 3), y = (— l)^°5^i (mod 8), 

(7c) ind {y) = [/q, ^ 2 ]. (^o» ^2 determined modulo 2). 

We can easily see the vectors corresponding to 5, 7, and 1 1 (= 35 modulo 
24); 

ind (5) = [0, 1, 1], ind (7) = [I, 0, 0], ind (11) = [I, 1, 1]. 

In accordance with the usual vector laws, we define addition [with each t^ 
determined modulo <l>(pf*f 2, or ^(2^0/2, according to (5a), (5^), or (5c)]. 
Let 

(8) ind (y) = [^o, /i, ‘ ind (y) = ?/, • • * tj]. 

Then 

(9) ind (y) + ind (y) = [/« + h + * * * » ^ + tj]. 

We then have an obvious theorem 

(10) ind (yy) = ind (y) + ind (y). 

^ The statements such as (6) must be suitably modified in case an entry such as is 
absent (when m is odd) as well as when is absent (or 2^ || m). (Effectively, n — s ox 
J i 1.) 

2 We use the term “vector” intuitively as an “ordered n-tuple of components with 
addition and subtraction defined for two vectors by a component-by-component 
operation.” 
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EXERCISE 7, From representations {lb) and (7c) draw the conclusion that 
ind {y^) = [0, 0, 0] for all 2 /, for which (y, 24) = 1 . (In other words all such y are 
solutions to 2 /^ = 1 , modulo 24). 

EXERCISE 8. Find all m for which, whenever (2/, w) = 1, then 2 /^ = 1 (mod m), 
using the index vector notation as in Exercise 7. 



GROUP THEORETIC CONCEPTS 
6. Abdian Groups and Subgroups 

In the development of number theory, structurally similar proofs had 
been repeated for centuries before it was realized that a great convenience 
could be achieved by the use of groups. 

We shall ultimately repeat the earlier results (§5) in group theoretic 
language. We need consider only finite commutative groups in this book. 
A finite commutative (or abelian) group G is a set of objects : 

0^) ^2? * * ’ J 

with a well-defined binary operation (symbolized by 0) and subject to the 
following rules: 

{\b) a, 0 a^ = a, 0 a^ (Commutative law) 

(Ic) a^ 0 (a^ 0 a^) = (a^ 0 a^) 0 a^, (Associative law) 

for every a^ and a, an a^j. exists such that 

{\d) a,. 0 ajk = a,. (Division law) 

From these axioms it follows that a unique element, called the identity and 
written e, exists for which a^ 0 e = a^. The number of elements h of the 
group is called the order of the group. The powers of a are written with 
exponents a 0 a = a^, etc. The axiom {d) can be interpreted as meaning 
that the set 

a^. 0 ai, a,- 0 ag, * * * , a^. 0 

constitutes a rearrangement of the group elements (1) for any choice of a,-. 

A subgroup is a subset of elements of the group which under the opera- 
tion 0, themselves form a group. It can be verified that the subgroup 
contains the same identity e as G. A well-known result, that of Lagrange, is 
that the order of a subgroup divides the order of the group} 

The groups that are involved modulo m are of two types, additive and 
multiplicative. 

^ Gauss in his Disquisitiones was particularly blind to groups and repeated the proof 
everytime he used this result (implicitly). Modern books on number theory, at long last, 
take greater cognizance of groups than did Gauss. Despite this fact, his results on 
quadratic forms were a stimulus to the group concept. 
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The additive group modulo m has as elements all m residue classes (both 
those relatively prime to m and those not relatively prime to m). In 
accordance with our earlier notation, we would write the residue class 
merely as x. The group operation 0 is addition modulo w, and for con- 
venience we represent it by +, or x H- y = x + y. This statement is 
exceedingly transparent and we see that {\d) calls for subtraction, i.e., 

(2) Xj + Xf, — Xi means X;;. = x,- — x^- 

and e = 0 in the usual way. 

The multiplicative group modulo m, M(m) has as elements those 4>{m) 
residue classes relatively prime to m. The operation 0 is multiplication 
modulo m and (\d) is less trivial; indeed, it is equivalent to the fact that 
aja^ represents an integer (mod m) relatively prime to m if (a^, m) = 
(a^, m) = 1. We again represent residue classes by x. 

EXERCISE 9. With a convenient numbering of elements, let = e and let 
K = {hi, 32 , * ' • , be a subgroup of order t in G [given by (la)]. Let Kj denote 
the so-called coset {a^ 0 aj, a* 0 a 2 , • • ■ , a^ 0 a^} for / = 1, 2, • ♦ • , /r. Show 
that either and K, have no element in common or that they agree completely 
(permitting rearrangement of elements in each coset). From this result show t \ h 
(Lagrange’s lemma) and that there are hjt different cosets. 

EXERCISE 10. Show that the Fermat-Euler theorem [(4), §4] is a consequence 
of Lagrange’s lemma by establishing the subgroup of M(w) generated by powers 
of b modulo m where {b, m) = \. 

7. Decomposition into Cyclic Groups 

A cyclic group is one that consists of powers of a single element called 
the generator. Two simple examples immediately come to mind. 

The additive group modulo m is generated by “powers” of 1. Here, of 
course, the operation 0 is addition, so the powers are 1, 1 + 1 = 2, 
1 + 1 + 1 = 3, etc., and, of course, m can be written as 0. 

If m has a primitive root g, the multiplicative group modulo m has 
elements and is generated by powers of g (under multiplication) namely 
• • • . (= 1 ) '”)• 

The order of a group element is defined accordingly as the order of the 
cyclic group which it generates. By Lagrange’s lemma, the order of a group 
element divides the order of the group. 

We use the notation Z or Z{m) to denote a cyclic group of order m, 
whether it is multiplicative or additive. Thus the multiplicative group 
modulo m is cyclic, or, symbolically, 

(1) M(w) = Z{<f>{m)) 

if and only if a primitive root exists modulo m. 
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[Sec. 7] DECOMPOSITION INTO CYCLIC GROUPS 

Not every abelian group is cyclic, as we shall see, but for every abelian 
group G we can find a set of generators go, gi, ' ' * , gs such that g, is of 
order h, and an arbitrary group element of G is representable uniquely as 

(2) g = go'o 0 gi^i 0 • • • 0 g/* 

(meaning that the t^ are determined modulo hi by the element g). This 
result is called the Kronecker decomposition theorem (1877). We shall 
prove it under lattice point theory in Chapter V, but no harm can be done 
by using it in the meantime. We write this decomposition, purely symboli- 
cally, as 

(3) G == Z(/^o) X Z(/^i) X * * • X Z(A,). 

The order of G must be (by the uniqueness of the representation 

(2) of g through exponents modulo h^. 

For the time being we note that Kronecker’s result holds easily for M(w), 
the multiplicative group modulo m for each m. This is a simple reinter- 
pretation of the representation for the reduced residue class modulo m 
given in (6), §5. We represented the multiplicative M(m) by the additive 
group on 

(4) ind (y) = [^o. hr" , « J, 

where is represented modulo hi, as in §5. Then, for instance, the 
generators are go = [1,0, ■ ■ • ,0]gi = [0, 1, • • • , 0], • • • , g, = [0, 0, • • • , 1] 
and 



(5) M(m) = Z(/^o) X Z(/i,) X • • • X Z{h,). 

Here h^. = with the usual provisions that when 8 | w, h^= 1, 

hi — <^(2®i)/2; when 2^ || m,hQ — 2 and the h^ term is missing, as provided 
in (5fl), (5h), (5c) of §5. 

We note, in conclusion, that the group G given in (3) is cyclic if and only if 
(/to, ^i) = (Ao» ^ 2 ) — (^i» ^ 2 ) = ’ ’ * = 1* (We recall that in the group 
M(w), 2 I hi so that M(w) is seen to be generally noncyclic and thus no 
primitive root exists modulo m generally). To review the method of proof, 
let us take G = Z{h^ X of order h^h^. First, we verify that go 0 gi 
is of order hfi^ if {h^, h^ = 1 ; hence it generates G. For if 



then 



(go ® gi)'' = 
go'' ® gi* = e. 



By the uniqueness of representation of element e, a: = 0 (mod ^ 0 ) 

X = 0 (mod hi), whence | Second, we note that if (Aq, hi) = d> I 
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no element g of G can be of order h^h^. Indeed, the order of 0 
cannot exceed fiQhild, For 

= e 0 e = e. Q.E.D. 

EXERCISE 11. If w = pip^y where pi and p^ are different odd primes, does the 
statement M(w) == Z{pi — 1) x Z (/?2 — 1) mean that every reduced residue 
class X (modw) has a unique representation as x (modw) where 

0 < < Pj — 1> 0 = E 2)? Hint. Take w = 15. 

EXERCISE 12. Show that in a cyclic group of even order half the elements are 
perfect squares and in a cyclic group of odd order all the elements are perfect 
squares. Square all elements of Z(6) and Z(5) as illustrations. 

EXERCISE 13. Do the statements of Exercise 12 apply to noncyclic groups? 



QUADRATIC CONGRUENCES 



8. Quadratic Residues 



The values of a for which the congruence in x, 

= a (mod p) 



is solvable are called quadratic residues of the odd prime p. The quadratic 



residue character is denoted^ by the Legendre symbol 
where 



[also written (a//?)]. 



( 1 ) 




if = a (mod p) solvable and (a, p) = 1, 
if (a, p) = p, 

if x^ = a (mod p) unsolvable. 



Thus [1 + (ajp)] is the number of solutions modulo p to the equation 
x^ = a modulo p for any a. Easily 



and 



(f ) = 


^ j if a, = flj (mod p), 


(f)' 


(f) - (t)- 



^ We refer to a and p as “numerator” and “denominator” (for want of more suit- 
able universally established terms). 
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[Sec. 8] QUADRATIC RESIDUES 

Thus the evaluation of the symbol (ajp) reduces to the evaluation of the 
symbols (—!//>), (2//?), and (qjpX where q is any odd prime. 

The famous quadratic reciprocity relations are 



{2a) 




(2b) 


II 

1 

!» 


(2c) 





where p and q are odd positive primes. These relations enable us to 
evaluate {qjp) by continued inversion and division in a manner described 
in elementary texts. To avoid the factor (_ could write 

[qjp) = {p^^jq) where /?* = /?(“!//?). For example, 3* = —3, 5* = 5; 
thus (^/3) = (-3/^), whereas {qj5) = {5jq\ 

A very useful relation due to Euler is 

(3) (-j = p) 

for p an odd prime and (a, /?)=!. 

The equation 

(4) = a (mod p^) 

can also be shown to present no greater difficulty for 5 > 1 than for s = 1, 
The fundamental case is where {a, /?) = 1 , There we can show, if p is odd, 
that the solvability of 

(5a) = a (mod p), {ci,p) = 1, 

leads to the solvability of 

(5Z?) = a (mod p^), s > L 

Correspondingly, if 

(6a) a = I (mod 8), 

then we can solve 

(6b) x^ = a (mod 2®), > 3. 

The details are illustrated in Exercises 14 and 15. 

EXERCISE 14. Show that if 

= a (modp% (p odd), (a,/?) = 1, 
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we can find a value k (mod p) for which 

^s+i kp^ (mod /?0 

and 

= a (mod 

Construct the sequence x^, x^, x^, x^, starting with = 2, a = — 1, /? — 5, 
x^^ = — 1 (mod 5). 

EXERCISE 15. Show that if 

xj^ — a (mod 2^, s > 3, a = \ (mod 8), 

we can find a value k such that 

^s+i = ^5 -h kl^-'^ S (mod 2*“^), ik 0 or 1), 
and 

= fl(mod 2*+^). 

Construct the sequence (1 =)^ 3 , x^ for 

x,^ = 17 (mod 20. 



9. Jacobi Symbol 



As an aid in evaluating the symbol {a/p) numerically, we introduce a 

(0 

generalized symbol for greater flexibility, namely (alb). For b = ± YLPi"' 
we define 

m =TT^— V' h negative, or zero, 

\b) lb odd, nonzero. 

For b = ±1 we define the symbol as 1. 

Then it can be shown that for a, b, positive and odd; 



(;) = ©<-> 



U6-l)/2-(a“l)/2 



A necessary and sufficient condition that 
(3) ^ a (mod pq) 



be solvable for /?, q distinct primes not dividing a is that the individual 
Legendre symbols (ajp), (ajq) all be + L If the Jacobi symbol (ajpq) is — I, 
(3) is unsolvable. 

There are many cases in which the evaluation of (ajp) (Legendre symbol) 
can be facilitated by treating it as a Jacobi symbol in order to invert. The 
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answer is the same, as both symbols must agree for (ajp). We shall ulti- 
mately see that the introduction of the Jacobi symbol is more than a 
convenience ; it is a critical step in the theory of quadratic forms. 

Thus we conclude the review of elementary number theory. The deepest 
result is, of course, quadratic reciprocity, which we shall prove anew in 
Chapter XI from an advanced standpoint. 

EXHRClSH 16 (Uirichiet). Evaluate (365/1847) as a strict Legendre symbol and 
(inverting) as a Jacobi symbol. (1847 is a prime.) 

EXERCISE 17, Show that even when a is negative, if |^7| > 1, ^ > 1 and a and b 
are odd, then 

(4) ^ 

EXERCISE 18. If \a\ > 1, |6| >1, with a and b both negative and odd, show 
that 




EXERCISE 19. Find an expression for ( — 1 jb) for b odd and negative and show 
Exercises 17 and 18 to be valid when \a\ or |i>l = 1. 




^chapter 1 . 
Characters 



1. Definitions 

An important question which we develop here is the manner of distin- 
guishing by analytic means a residue class modulo m, which is really an 
abstract concept. In our case this means we are trying to represent a whole 
residue class, 

(1) ^ = a(modm), 

by a set of ordinary (real or complex) numbers xip)^ called characters. 

We start more generally by defining characters for a finite abelian groups 
G of order h with elements aj, ag, * • * , (where a^ = e, the unit element). 
We call the character x a function over all group elements, or 

(2) x(^iX ’ Z(a Ja 

with the properties 

(3) X(a,) ^ 0, 

(4) X(^,)xi^i) = Z(a,a,). 

It is easily seen that xi^) = h using a^e = a^ in (4). Furthermore, if h is 
the order of the group, then a^ = e, for any element a of the group. Thus 
[%(^)1^ = X(P^) — 1 js an h-root of unity, i.e., 

(5) x(^) = {iTTitjh) = cos iTTtjh i sin iTrtjh 

^ Henceforth the group operation will be written ab instead of a 0 b. 

22 
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[Sec. 1] DEFINITIONS 

for an appropriate t. There are h such roots of unity for the h values 
/ = 0, 1, 2, ■ • ■ , — 1. Thus the number of possible characters % deter- 

mined by the values (2) is at most h^. Actually, there are precisely h 
characters, as we shall soon see. (Naturally, two characters are different if 
and only if they differ for one or more group elements.) 

The product of two different characters, denoted by is a character 

if we define for an arbitrary group element a, 

( 6 ) = xM)X2(^) 

using ordinary multiplication. Then easily {xiX 2 }(^) is never zero. Further- 
more, for group elements and a^ 

{XlX2}(^i»,) = XMi>^i)X2(»i!^,) = Xli^^)Xx{^h2{^^X2i^i) 

= {XlX2}(^i){XlX2]i^i)- 

Hence X1X2 i^^s the properties of a character in (3) and (4). We define Xi" 
in like fashion. We can now have a group of characters X. We call 
{X1IX2} the (obvious) quotient character using ordinary division: 

( 7 ) {XiIX 2 )(.K) = xM,)IX 2 i^d- 

In the same spirit we define the unit character by 

(8) = 1 for all a^. 

In the case of residue classes under multiplication, we can identify a, 
the group element, with y = a, the residue class, and use ;^(a) and ;^(a) 
interchangeably, with “modulo w” and (a, m) = 1 understood. We can 
also write x(^) = 0 if (a, m) # 1 without contradicting the multiplication 
law (5). 

As an example, consider first the reduced residues modulo 5. Clearly 
y^ = I (mod 5) so that from (5) xi^) have only one of the four values 
/, —1, +1. The reader can verify the following characters (four in 

number): 



TABLE 1 

Reduced Residues Modulo 5 



a — e 




as 


a4 


y = 1 


2 


3 


4 


Zo(a) = 1 


1 


1 


1 


Zi(a) = 1 


/ 


— / 


-1 


Zs(a) = 1 




/ 


-1 


Za(a) = 1 


-1 


--1 


1 
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To illustrate the group property for residue classes, we note the relations 
(9fl) 2-3 = 1 (mod 5), 

(10a) zX2);t,(3) = xM 

(11a) (- 0(0 = 1 . (e-gv taking; = 3). 

To illustrate the group property for characters, we note the relations 

(9b) ya(a) = Xii^) = ;i;i(a)®, Xoi^) = Xi(^)*^ 

(m ;^3(a,) = Xii»,)\ 

(1 \b) i = (- 0 ®, (e.g., taking/ = 3). 

We observe that the cyclic structure of M(5) somehow carries over to the 
characters. 

The reader can verify the following scheme modulo 8 : 



TABLE 2 

Reduced Residues Modulo 8 



a = e 


^2 


^3 


»4 


y^l 


3 


5 


7 


Z«(a) = 1 


1 


1 


1 


Zi(a) = 1 




-1 


1 


Z2(a) = 1 


1 


-1 




Z3(a) = 1 


-1 


1 


-1 



and the properties 



(9c) 



Xl = = Xo, 

.XlXi = X3’ X 2 X 3 = Xv X 3 X 1 = X 2 - 



These properties are capable of generalization, as we shall now see. 



2. Total Number of Characters 

The main result^ is that an abelian group of order h has precisely h 
different characters. 

To see this result, first consider a single cycle of order h, 

G = Z(h), 

^ For this chapter we assume Kronecker’s theorem on cyclic structure, proved in 
Chapter V. 
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[Sec. 2] TOTAL NUMBER OF CHARACTERS 
The elements of G are expressed in terms of a generator a as 

a, a*, • • • , a*(= e). 

Then, clearly, the values of xi^) are of the form exp Iniulh, and 

(1) x(^^) = 2nitulh, for 0 < t < h. 

Thus we obtain h different characters as u varies : 

(2) = ^xp Imtujh, 0 < w < /?. 

For each character (or for each fixed u) the h group elements are generated 
at t varies to 0 to /? — 1. The properties (3), (4) of §1 are easily verified for 
the characters in (1) and (2). 

The comparison with Table 1 in §1 (above) for reduced residues modulo 
5 should be altogether clear if we note that a = 2 and that a* has the 
successive values 2^ = 2, 2^ = 4, 2^ = 3, 2® = 1 (all statements holding 
modulo 5, of course). 

Next, let G = Z(Ai) X Z(/t 2 ), an abelian group of order which is 
decomposed into two cyclic groups of order and h ^, : 

ai, al^ • • • , ai*' (= e), 

aj, a^^, • • • , a/* (= e). 

Thus the general element of G is 

(3) g = 0 < < /?i, 0 < ^2 < ^2- 

Then we write 

( 4 ) = exp ImOiUilhi + hu^lh^. 

As Wi and «2 vary, they are reduced modulo and /zg, respectively, so that 

(5) 0 < Ml < /li, 0 < Mg < ^2- 

We generate all (different) characters, as we verify below. The reader 
can refer to residue classes modulo 8 in Table 2, §1 (above). Here 
hi = hi = 2, xo^ Xiy X 2 j X 3 can easily be identified with the 4 characters Xu^u^ 
in (4), where Mj = 0, 1 and Mg = 0, 1 . 

Thus, when we have an abelian group of order h (using cyclic structure), 
we can show that there are h characters. We can even see that the character 
group has the same cyclic structure. (These proofs occupy the rest of the 
section.) Specifically, let 

(6) G = Z(/zo) X Z(/zi) X • • • X Z(/z,) 
so that an arbitrary, element of G is 

(7) a = • • • a/*, mod 
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Then, as we have shown for 5=1, here are h = - possible 

characters : 

(8a) Xuou, ■ • • «.(a) - exp lui + • • • + , 0 ^ < h^. 

\ ho hj 

A convenient notation is 

(8*) ■ ■ •«.(“) = eitol'hoTo ■ ■ • e(tjh,)\ 

0 <Ui< hi, 0 <ti< hi, 

using the function 

(9) e(f) = exp 27T/f . 

This function has the obvious period 1, e.g., e{i + 1) = e(^), as well as the 
exponential property e(i rj) = e(^)e(rj). Also, = 1 if and only if ^ 
is an integer. 

It is not obvious that the h characters listed in (8fit) are different. For 
instance, if Wq ^ ^o)> must verify that for some a 

(lOa) Xvo-'4^) 

But we need only take a = Rq in (7), then the relation (10a) follows from 
the obvious result that (with /q = U = ^2 = * * * ^« = 0)» 

(lOZ?) exp 27 t/Mq//?q =4 exp IttwJIiq. 

In similar fashion if a ^ e we can find some x the set (8^?) for which 
Xi'Si) 1 . For example, if a # e, then in the decomposition, 

(11) a = ao'« • • • a/-, 0 < ti < bi, 

we note one exponent (say) (mod h^). Thus, 

(12) ^100 -"oW “ ^ 1- 

Now let us assume there are c characters in the character group X; we 
know c > h. We shall show c = h. First note the results: 

hi^X = 

0 if ;^ = any other (fixed) character; 
c if a = e, 

0 if a = any other (lixed) group element. 

First take (13). For x = Xo the conclusion is obvious. For x ¥= Xo 
write 2 ;^(a) = S, We have for each fixed x an element a* such that 

ain G 

x(a*) 7 ^ 1 (by definition, since x ^ Xo) I whence 

S = 2 z(aa*) = 2 X(a)z(a*) = S;^(a*), 

a in G a in G 



(13) 


2 2(a) = 




a in G 


(14) 


2 2 (a) = 

XinX 
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[Sec. 3] RESIDUE CLASSES 



since as a varies a*a is a rearrangement of the group elements denoted by a. 
The conclusion follows from the fact that x(^*) ^ ; hence 5 = 0, 
Likewise in (14), for a = e the conclusion is obvious. For a 7 ^ e write 
2 x(^) = ‘S'- But we have a special character x* for which ^*(a) ^ 1, 

X in X 

by (12). Therefore, 

S = 2 xX*x](^) = 2 %*(a) ■ X(a) = Sx*{n), 

xinX Z'nX 

since, once more, with x* fixed, {%*%} is a rearrangement of the characters 
X of X. Thus, since x*(^) 7 ^ 1, ‘S' = 0. 

The final result now follows: 

(15) h = c. 



For proof, set 



22%(a) =22;t(a). 



using relation (13) on the left and relation (14) on the right! 

From (13) we find that, since XilXi = Xo exactly when Xi = X 2 , 



( 16 ) 



2 xii^)x2-\^) 

a in G 



ih when Xi = X 2 - 
(0 when Xi^X 2 - 



Such results would be more laborious to prove by using the cyclic structure. 
The “dual” result is 



( 17 ) 



2 x^^i)xi^2 ^) = 

xinX 



h when a^ = ag, 
0 when a^ ag. 



Again we note x(^il^ 2 ) = x(^i)lx(^ 2 )’ aj/aj = e exactly when aj = aj. 

The relations (16) and (17) are called “orthogonality” conditions, by 
analogy with the perpendicularity of two (ordinary) geometric vectors 

7)1 

[Ai, • • • , AJ, [5i, • • • , BJ, namely 2 = 0- 

1 = 1 



EXERCISE 1. Show that there are no other characters than those listed in (8a) 
directly by considering value of /(ag), xC^i), • • , z(3s) for the generating group 
elements in (7). 

In this exercise and the next take 5 = 2 for convenience. 

EXERCISE 2. Show (16) and (17) directly from the explicit form of the 
characters in (8a). 



3. Residue Classes 

We noticed in Chapter I, §5, that the residue classes y = a modulo m, 
relatively prime to w, can be represented additively by the vector index. 

(1) indy = [/g, ^ 1 , * * * , LL 
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where r, are the exponents used in (5a, b, c) of Chapter I, §5, with 

The congruence classes of are somewhat varied but can be represented 
symbolically by 

(2) 0 < r, < h,, 

where = 4>{ 2, or as the case may require (for i > 1, / = 0, 

i = 1). Of course, = hQh^ * * * order of the group of reduced 

residue classes M(w), making the usual allowances for missing components 
if 8 < AM. 

The additive group of indices may be represented symbolically in the 
usual form of (6) in §2 (above) or of (5) in §7, Chapter I ; 

(3) M(am) = Z{ho) X Z(Ai) X • ' * X Z(hX 

with hi defined as the moduli of (5a, b, c) in Chapter I, §5. 

Its characters are seen to be in the form of (8^) and (9) in §2 (above). 
We think of the arguments as integers y rather than group elements, 
written as 

(4) • . • u,iy) = ^('o/Ao)“» • • • e{tjh,r-. 

For more convenient symbolism, we use the new symbol with a single 
subscript : 

(5) Xj,^4y) = Khlhi) = Xo-ow-dy) 

where the subscript 0 * ■ • 010 * • ■ 0 symbolically denotes = 1 and = 0 
for all other (y /)• 

When = 2"^S > 3), there are two symbols corresponding to 

K^o/^o) and which we denote by x^{y) and We recognize, 

of course, x^^iv) = = (—1)^*'“^^^^ if ?/ > 0 and odd and x^iv) = 

(2jy) = (— for example, when = 3. 

From now on, Xiiy) Xoiv)) denote the unit character. 

The illustrations we now give are self-explanatory, except for the right- 
hand marginal notations“bT type “(W^)” and “Af = • • •” which are 
explained in §4 and §7 (below). The reader should identify the characters 
of (4) with those on pages 29 and 30. 

EXERCISE 3. Construct a similar table modulo 9, 15, 16, and 24. (See aw = 12 
in §6, below.) 

4. Resolution Modulus 

We next consider extending the domain of values over which x is defined. 
To begin with, we might set = 0 where it has been previously undefined, 
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TABLE 3 

m = 3, ^(3) = 2. 



h = 



= Z 3 ( 2 'i) = exp Imtjl = 
Xl = Z3* = 



1 

20 


2 

21 


0 


1 






1 


-1 


1 


1 




(M = 3), 
(A/ = 1), 



(-3/J/) 

(%) 



TABLE 4 




(-4/3/) 

(4/3/) 



TABLE 5 





W = 


5, 


^(5) = 


4 




1 

20 


2 

21 


3 

23 


4 

22 


h = 


0 


1 


3 


2 


xs,(y) = Xs0^) = 

exp 2m7i/4 = Zs = 










1 


i 


— / 


-1 


Z5^ = 


1 


-1 


-I 


1 


Zs® = 


1 


—i 


i 


-1 


Zs^ = Zi = 


1 


1 


I 


1 



= 2‘i 



(M = 5) 
(M = 5), 
(M = 5) 
(M = 1 ), 



(5/t/) 

(25/3/) 
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TABLE 6 

m = 7. <^(7) = 6 
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TABLE 7 

fn = 2^ ^(8) = 4 

y = 

^0 ” 
h = 

;f4(2/) = (-ly^ = 
x%{y) = (-lyi = 

Ws = 

A4 ”48 ” 4l “ 

knowing that the multiplication rules of §1 (above) still apply, although 
division is restricted to the original range. We, of course, want less 
trivial extensions. 

When a character xiv) is defined for y modulo m, with (y, m) = 1, it 
might still happen that 

(1) x(2/i) = xiy^ 

whenever 

iVi, m) = (^ 2 , m) - 1 
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and 

(2) yi = (mod M'), 

for some other M' in addition to m. The smallest M' (>0) for which the 
property holds is called the resolution modulus M. 

For example, the unit character modulo m is defined by 

(Zi(2/) = 1- (y,m) = l, 

0 ) 1 

Ui(2/)=0, (y,m)>l, 

but it might just as well have been defined modulo 1 by x*(y) = 1 then 
Xi ^ X"^(y) specialized to only those y where {y, w) = 1. 

A less trivial example is %^{y) modulo 8 (see Table 7 above), for which 
= 4, e.g. , 

M?/) = 1. if «/ = 1 (mod 4), 

('^) 

= -1. if 2/ = -1 (mod 4). 

The resolution modulus is indicated in the margin of the table by 
(M = • • •). 



LEMMA I . An equivalent definition of the resolution modulus M is the 
least value of the positive integer M* with the property that 

(5) z(y) = I 

whenever/= I (mod A1*) and (y, m) = I. For proof see Exercise 4 (below). 

We next define the natural extension of a character %{y) modulo w to a 
character modulo M where M is the resolution modulus of x{y). The 
process is trivial, of course, unless the values of y for which {y, M) = 1 
include more values than those for which (a/, m) = \. Asa nontrivial case, 
for example, if w = 15 and M = 3, we might have a character x^^y) 
modulo 15 which is none other than / 3 (^) but limited in domain of 
definition to {y, 15) = 1 and trivially extended to 0 when (?/, 15) > 1. 
(Compare the following table with Table 3.) 



TABLE 8 

y(modl5) 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 

x \ y ) 0 1-10 1 0 0 1 '-1 0 0 -1 0 1 -1 

xziy ) 0 1-10 1-10 1-10 1-1 0 1-1 



We would like to know how to retrieve Xziy) from x\y) “natural” 

process of noticing that x^iy) is determined modulo 3 as long as {y, 5) = 1. 
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The basic method is contained in the following lemma: 

LEMMA 2. If (y, M) = I, then for given y, M, and m we can find an x 
such that 

(6) (y + Mx, m) = I . 

Proof. Let be a general primary divisor of m. Then an exists such 
that {y + = L For, if p^ \ Af, then Pi^ y and x^ = 0 suffices. 

If pi f M, any choice of x^ with x^^ —yjM {mod p^ will suffice. By 
the Chinese remainder theorem, an x exists which satisfies x = x^ (mod p^ 
and {y + Mx, m) = 1. Q.E.D. 

Thus, if xiy) modulo m has resolution modulus Af, we define 
natural extension of x modulo Af, by using T = 2/ + Mx of the lemma. 

= %{y) for {y, = 1 (even if (?/, m) > 1) and 

U*(y) = 0 for {y, M) ^ 1 

We can see that the value xiv) is unique, despite the latitude in the 
choice of x by definition of the resolution modulus (since all Y are con- 
gruent to one another modulo Af). Furthermore, we can see that x^iv) 
resolution modulus Af (by showing that if x^iv) ^ 1 whenever ?/ = 1 
(mod M% and {y, w) = 1, then x{^ = 0* 

EXERCISE 4. Prove Lemma 1. {Hint. Call M" the resolution modulus as 
defined in the lemma. Show trivially that M > M'\ and, using the residue class 
yily^y show M" > M.) 

EXERCISE 5. Show that the resolution modulus is given by the subscript in 
X 4 {y) and 

EXERCISE 6. Show that the resolution modulus of a character modulo am is a 
divisor of every M' for which (2) leads to (I). 

EXERCISE 7. The reduced residue class group modulo m has a character whose 
resolution modulus is m unless 2 || m. (Show that one such character is Xn by 
using each primary factor of am, giving particular care to 2«i.) 

5. Quadratic Residue Characters 

We recall that Jacobi’s symbol {a/b) had the property that the denomina- 
tor could vary over odd positive or negative integers. The reciprocity law 
is slightly encumbered if we permit negative signs (see Exercises 17 and 18 
of Chapter I, §9), yet even restricting ourselves to odd b we can consider 
the denominator “more arbitrary” than when b is prime. 

We pursue the opposite of the original viewpoint of Legendre’s symbol 
by writing 

( 1 ) 



xiy) = {a!y\ 
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as a function of the denominator for odd y. Clearly, 

( 2 ) = xiy-dxiy^ 

and 

(3) xiy) ^ 0 

for y odd and relatively prime to a. To see that i^ a character in the 
sense of this chapter, we must find a modulus m to which it belongs in the 
sense that 

(4) xiy) = if 2/ = 1 (mod m), (j, w) == 1. 

It is easily seen that we can take m — Aa ii we take > 0 only, for then the 
reciprocity law yields for a odd (by Exercise 17, Chapter I) 

(5) = 
and easily 

(6) xiy + 4fl) = xiy\ 

We now ask the vital question : what is the resolution modulus of %{y) 
as a character? To answer this, first we define a square-free integer as one 
which has no perfect square divisor greater than 1. Then we define k{a)y 
the square-free kernel of a, as follows : if ^ = AB^ and A is square-free, 
then k{a) = A. 

THEOREM. The character xiy) = (o/y)» restricted to y > 0 and y odd, is 
a character with resolution modulus |k(o)j if k{a) = I modulo 4 and 4 |k(o)| 
otherwise. 

Proof If (y, a) == 1, (a/y) = (k(a)ly) directly from definition. Suppose 
2 f k(a); then, since y > 0 and y odd, 

{5d) ikia)ly) = 

If k(a) = 1 (mod 4), ik(a)ly) = iylk(a)). Thus the Jacobi symbol (with y 
odd), (aly), is determined by y modulo k{a). If k{a) ^ 1 (mod A),{k{a)ly)\s 
determined by y modulo ^k{a), i.e., 

(6a) (M£1) = (... Mg)_) 

\ y > \y + 4k(a)/ 

as is easily seen. 

Next suppose 2 | k(a). Then k(a) = 2a*, a* odd. 

ik(a)ly) = {2ly)(a*lyy 

But ia*jy) is determined by y modulo a* or 4a*, hence modulo 4a* (easily), 
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whereas (Ijy) is determined by y modulo 8, hence {k{a)jy) is determined by 
y modulo Sa* = 4k(a). 

To prove that the quantities stated in the theorem are resolution moduli 
in the respective cases, we must show a prime factor p cannot be removed 
from k{a) or 4k{a), as the case may be. Thus the integer k{a)jp or 4k(a)lp 
would not be suitable as resolution modulus in the respective cases k(a) = 1 
or k{a) ^ 1 (mod 4). 

First of all let p be odd ; we wish to show that if y = 1 (mod k(a)lp) 
[or even (mod 4k(a)lp)] this would be insufficient to imply that %{y) = i^lv) 
= 1. For proof take ?/* such that (/?/«/*) = — L [To do this, note that 
if = 1 (mod 4) from reciprocity {y'^jp) = {ply*) and can be chosen 
simply congruent to a nonresidue modulo p,] Then, if 



(7a) 


y = 


1 (mod 2), 


with 






(7b) 


y = 


1 (mod k{a)lp). 


and 






(7c) 


y = 


y* (mod p), 



we can still have %{y) = 0 if (?/, < 3 ) > 1, whereas, otherwise 

(8) xiy) = (4A:(a)/y) = {k{a)iy) = {[k{a)lp\ly)iply) = -1. 

The more difficult case is /? = 2. For this case k{a) ^ 1 (mod 4). 

Then there are two alternatives. If 2 f k{a), then k{a) = —1 (mod 4). 
We choose y = 1 (mod k{a)), y = 3 (mod 4), and y = 1 mod {4k{a)jl), 
Thus %{y) — 0, if («, y) otherwise 

(9) %{y) = {aly) = {k{a)!y) = = -1, 

completing the proof for the alternative 2 f k{a). 

Now, if 2 I k{a), then 4 f k{a), and we can take y = 1 (mod k{a)j2) at 
the same time as = 5 (mod 8). Thus y = \ (mod 4) and y = 1 (mod 
k{a)!2\ which yields 

(10) y^ 1 (mod4A:(a)/2); 

but, using reciprocity [formulas (4) and {2b) of Chapter I, §9], we see 

(1 1) {4k{a)jy) = {\k{a)ly){2ly) = {ylhk{a)){2ly) = - 1 . Q.E.D. 

The reader may wonder why the symbol {ajy) was not treated as a 
function of a, which seems to lead to a simpler theory (see Exercise 8 below). 
The reason will be clear as we find that the symbol {ajy) as a function of y 
is just right for an important application (Dirichlet’s lemma, §7). 

EXERCISE 8. Show that x*M ~ (u/b) has resolution modulus k{b) with no 
restriction that a be positive. 




[Sec. 6] kronecker’s symbol and hasse’s congruence 
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6. Kronecker’s Symbol and Hasse’s Congruence 



The theorem of the preceding section makes the introduction of further 
concepts mandatory, first as a matter of convenience and then as an 
essential part of the theory ! 

Note first of all that if a = I (mod 4) then the character y(y) = (aly) 
must have resolution modulus \k(a)\, which is odd and for which k{a) = 
1 (mod 4), ail odd squares being = 1 (mod 4). Since k(ay\ a, we can define 
the residue symbol (a/2) as follows: 




Thus we have Kronecker^s extension of Jacobi's symbol: 



( 2 ) 




0 if 4 divides a, 

1 if a = 1 (mod 8), 

— 1 if a ^ 5 (mod 8), 
undefined for all other a. 



The general symbol (alb) can be defined by prime decomposition as in 
Chapter I, §9, to accommodate any resolution modulus of the element a, 
since any resolution modulus is in one of the “definable” categories for a. 
Of course, a may have square factors other than 4. 

Second, we note that in the theorem in §5 (above) on the resolution 
modulus of (a/y) the condition that ?/ > 0 is required only to ensure the 
validity of the reciprocity law (5a) when a < 0. (When a > 0, the condi- 
tion on y may be removed.) It is therefore clear that the sign should be a 
part of the resolution modulus. We define 



, ^ |/c(a), if k{a) s 1 (mod 4), 

'' '' ’ Ufc(a), otherwise, 

the so-called conductor (or Fiihrer in German). Then Hasse, for instance, 
restricts the meaning of a congruence modulo /(a) by saying 2/1 = 
modulo+/(a) when y^ — y^ is divisible by f{a) and when y^ and y^ agree in 
sign iff (a) < 0 (or with no further restriction if f(a) > 0). Thus, embody- 
ing the earlier remark on Kronecker’s extension, we can prove the follow- 
ing more final improvement of the theorem in §5. 



hasse’s resolution modulus theorem 

The Jacobi symbol (afy) = ^( 2 /), as a character, can be extended to 
the Kronecker symbol (f(d)ly) = x*(y)^ X*(v) == X(v) 'whenever 

y{y) 0. For this new character, ^ ^ when y is relatively prime to 
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/(a); and for nonzero values x^ivd = If and only if modulo+ 

f{a). Also \f{a)\ is the minimum value for which the latter congruence 
property holds in any extension symbol for %{y). 

In the rest of the book we consider %{y) mainly for y > 0, obviating the 
need for the new congruence symbol. [The symbol %*{y) for negative y is 
the subject of Exercise 9 (below).] 

Consider the further example: 

The real characters modulo 12 can be listed in terms of their generators 
X^^Xz' Ihe resolution moduli : 



TABLE 9 

m = 12 = 4 • 3, <j>{\2) = 4 

y = 
x^(y) = 
xziy) = 
xfy)xziy) = 
xi{y) = 



1 


5 


7 


11 


1 


1 


-I 


-1 


1 


-1 


1 


-1 


1 


-1 


-1 


1 


1 


1 


1 


1 



(M = 4), 
(A/ = 3), 
{M = 12 ), 
(M = 1), 



(-36/2/) 

(- 12 / 2 /) 

( 12 / 2 /) 

(36/2/). 



The characters %fiy) and Xziv) alone are definable for y even. For Xzi^)^ 
since /= —3, we must restrict y to be positive. 

EXERCISE 9. Show for xif) = {f{a)lb\ x(-b)^ x(b) but 

X(b) = xifia) -- b) if f{a) >0 and 0<b< f(a) 

= -Xi\m\ - b) iff (a) <0 and 0<b < \f(a)\. 

EXERCISE 10. Show that it is impossible to extend (a/y) to y — 2, when 
a = -\ (mod 4). Hint. Note (3/2) = (3/(2 + 12)) and (3/2)2 = ( 9 / 4 ) lead to a 
contradiction with earlier rules for (ajy). 



7. Dirichlet^s Lemma on Real Characters 

We now turn our attention to the real characters, i.e., those characters 
modulo m which take on only real values. If we inspect the tables in §3 
(above), we find that except for a few cases in which w = 7 and m =5 the 
imaginary element / = V— 1 is absent. We then observe that the real 
characters can be characterized by a Kronecker symbol (gjy) for some 
suitable g, not always square-free. (This accounts for the notation (gjy) on 
the right-hand side of the tables.) 





[Sec. 7] dirichlet’s lemma on real characters 
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dirichlet’s lemma 

Any real character %{y) modulo m can be expressed in the form 

(1) x(y) = (gly% y>o, 

using Kronecker\s extension of the Jacobi symbol. The value of g will =0 

or 1 {mod 4) and will depend on the character % as well as m. 

The proof of this theorem is tedious but not difficult. We shall illustrate 
the proof in the case 

(2) m = > 3, a^>\, a^>\, 

where p^ and p^ are distinct odd primes. The most general character 
modulo m in the notation of §3 is 

( 3 ) X^,u,u^uSy) = 

where, of course, the are given by {5a, b, c) in Chapter I, §5, and u^ and 
are determined modulo h^, where 

(4) Ao = 2, Ax = <^(2“0/2, Aj = A3 =<^(K») 

and 

(5) if>{m) = h^h^iji^. 

First of all, is a real character if and only if each is a 

multiple of hJ2. This is fairly elementary, since we can, for instance, 
choose y* so that (say) = 1 but the other t^ = 0, (/ = 0, 2, 3). Then 
= exp 27r/Mi//?i = cos iTTuJhi + / sin iTTuJh^. 
Naturally the imaginary term is absent only if sin InUijhi = 0 or Wi/(J/*i) 
is an integer. Likewise, ujdh^) would have to be an integer. 

Second, we verify (for y > 0) 

(6fi) e{tJhQ) = Xiiy) = (-1/2/), 

{6b) e{tjh,f^l^ = = (2/2/), 

(6c) = Xp^Hiyf"'^ = (W/’2). etc. 

This is, of course, the most important and least trivial step. Equation 6a 
follows directly from the fact that e{t^lh^ = (— and(— \jy) = y (mod 4), 
whereas in (5c), Chapter I, §5, 

(7) t/ = (-iyo5<i(mod2«i). 

Hence y = (— 1/® (mod 4). Similarly e{tilh^^^^^ = (— — 1 if and only 
if is even, or, easily, iF and only if «/ = ±{25j^^^ = ±1 (mod 8). If we 



^ See Exercise 12 below. 
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recognize this as the condition that (l/y) = 1, we see (6b). To see (6c), we 
consider the representation (5fl), Chapter I, §5, 

(8) y = g 2 ^ (rnodjOa^O. (y^Pi) = 1- 

We observe that ^2 if ivlpd = +1? for in elementary 

number theory (Chapter I, §8) we recall {yjp 2 ) = 1 if and only if the 
congruence 

y (mod (y, p^ = 1 

is solvable for each a^. Such values of y occur if^ and only if is even in 

(8) , always assuming {y,p^ = 1. Now 

= (- 1Y‘ = (ylp^. 

Thus, finally, any real character has the form 

(9) xiy) = (- ilyr^i2lyr'iylP2r<ylPzr^ 

where = 1 or 2. We use the notation p* = p if p s 1 (mod 4) and 
p* = —p if p = — \ (mod 4) and find by reciprocity (yjp) = (p*ly) for 
2/>0; hence we may satisfy (9) by 

(10) x(y) = (glyl g =(-i)"« 2 ^-"K/> 2 *)"^ (P3*r^- 

Note that when the factors 2^^, p^^^, or p^^^ become squares they con- 
veniently make xiy) = 0 when y is divisible by 2, p^, or p^, respectively. 
Of course, (10) is Dirichlet’s lemma for m in the convenient form (2). 

EXERCISE 11. Show that the only m for which all characters are real are 1, 2 
(trivial), and 3, 4, 6, 8, 12, 24. In fact, this is equivalent to the statement that all 
/fi = 2 in (2) of §3 (above). (Compare Exercise 7, Chapter I.) 

EXERCISE 12. Justify the “if and only if” statements in the proof of (6Z>) and 
(6c). (The “only if” is easy but not the “if.”) 

EXERCISE 13. Justify the factor in (10) and write out the similar 

equation if m is odd or if 2 || w and 2^ || m. 



^ See Exercise 12 below. 




chapter III 

Some algebraic concepts 



1. Representation by Quadratic Forms 

The basic problem is the representation of an integer m by the quadratic 
form in the integral variables x and y 

Q{x, y) — Ax^ + Bxy + = m. 

The problem is twofold. First of all, we must decide if such a representa- 
tion is possible or if the Diophantine equation in two unknowns 

(1) Q(x, y)=^m 

is solvable, and then we must find out how to characterize all solutions, 
i.e., how to write the general (x, y) satisfying (1). 

In this chapter we shall indicate how the problem, in principle, leads to 
the study of special algebraic systems. A satisfactory solution is not 
achieved until Chapter XII, and indeed not until we use algebraic numbers, 
in this case, quadratic surds {a + bV D)jc, that would arise if we were to 
solve the equation Q(x, y) Oby ‘‘completing the square.” 

Specifically, we write 

(2) 4AQ(x, y) = {lAx + Byf - Dy\ 

where D = B^ -- 4ACis the discriminant. We assume D is not a perfect 
square (hence A ^ 0), although D may have square divisors. 

In the case in which P < 0, it follows that 4AQ{x, y) >0 from (2); 
hence Q{x, y) is either zero or it agrees in sign with A, (In fact Q{x, 2 /) = 0 
only when the integers y are both zero, as is easily verified.) For /) < 0 
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the form is therefore called positive (or negative) definite, according to 
whether the sign of A is positive (or negative). We note that A cannot be 
zero, for then D = would be a perfect square. 

In the case in which D > 0 the form is called indefinite since the values of 
Q have no definite sign. Thus, if A values of x and y exist that make 
AQ > 0 (e.g., y = 0, = 1) or which make AQ < 0 (e.g., x = —B, 

y =,2A), If A = 0, it can be seen that Q can also be made positive or 
negative. 

The distinction between indefinite and definite forms carries over to the 
factors as the question whether Vi) is real or imaginary. 

EXERCISE 1 . Show that if i) is a perfect square the equation Q(x, y) = m has 
only a finite number of solutions and indicate how they would be formed. 



2. Use of Surds 



We excluded the simple case in which i) is a perfect square, and in the 
other case we shall introduce the symbol V D to accomplish the factoriza- 
tion of (2) in the last section. 

We introduce JVy the norm symbol for a fixed D, not a perfect square: 
if a, b, c are integers, positive, negative, or zero (but c ^ 0), then we define^ 
the conjugate surds 

. a + b^D 

A — j A — ' ' . 

C C 



Thus A = A' if and only if A is rational (b = 0). We can see (A')' = A. The 
norm is defined as 



N(A) = 




= AA'. 



Thus = jV(A), N(alc) = (a^/c^), ^AjAg) = N(X^). (The latter 

follows from the identity (A^Ag)' == ^ 1^2 ^2 ^^e two surds.) 

Although we may use several surds in a problem, they will all have the same 
square-free kernel as D (or the same “reduced” radical) so that the norm 
symbol N will always have a clear reference. When D <0, the norm, 
A^(f) = |||2 (the usual absolute value squared). In this new symbol the 
factorization (2) of §1 (above) becomes 

(1) 4A Q(x, y) = N(2Ax + By + Vd y). 

We now assume >4 7^ 0 for convenience. 

^ Unless otherwise specified, Greek letters denote variables which can become 
irrational. 
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The set of numbers f = 2Az 4- (5 + V D)y is generated by giving 
integral values to the integers y. This set really leads to a set of couples 
(f, f') like the cartesian coordinates of analytic geometry: 

U = 2Ax + {B^- 
y = 2Ax + (B- VD)y. 

Then the vector V = (f, f') is generated by the two vectors Vj = (2A, 2A) 
and V 2 = (B + Vd, B ^ V D) hy use of integral coefficients 

(2b) V = 2 /V 2 . 

The problem of (1) is to find a vector V = (|, f') of this type, for which 
(3) N(i) = 4Am. 

3. Modules 

We define a module as a set of quantities closed under addition and 
subtraction. Thus, when a module contains an element f, it contains 
0(= f — I) as well as negatives —|(= 0 — f ) and integral multiples 
(f -h I written 2f, f f + f written 3f, etc.) We shall use gothic capital 
letters % O, etc., to denote modules. 

The various vector sets used earlier [such as ind y in Chapter I and (f , |') 
of §2 above] clearly satisfy the definition of module. For the most 
important applications we generalize (2b) of the preceding section : 

We consider combinations of a finite set of vectors^ V„ 

(1) u == + XgVg + h 

where the range over all integers. The set of these u forms a module StH 
and the vectors V^, V 2 , • • • , are called a basis of the module, written 

^ = [Vi, V2, • • • , VJ. 

If the further condition is satisfied that no element u has two distinct 
representations of type (I), or in other words, the ^-tuple (a:i, ••• ,x^) is 
uniquely determined by u, we call the basis minimal.^ 

A module consisting of elements from a module is called a sub- 
module of 

^ From now on we can consider that vector means “element of module” without 
contradicting its previous intuitive meaning of “ordered /;-tuple.” 

^ Beginning with Chapter V, we shall take “basts” to mean “minimal basis” in 
reference to modules, to simplify terminology. (But compare the ideal basis defined in 
Chapter VII, §4.) 
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LEMMA I. Any submodule of the module 9Jl = [V] is precisely [nV] 
for a properly chosen integer n. 

Proof. Assume 51 does not consist only of 0. The submodule consists of 
some of the integral multiples of V. We consider the smallest |«| > 0 for 
which n\ lies in the submodule 51. For any element rnW of 51, « | m. 
Otherwise by the division algorithm mjn = q + rjn where 0 < r < |«| and 
the vector 

rV = (mV) -- q(n\) 

belongs to 51, since both «V and mV belong to 51. This contradicts the 
definition of n as the smallest element of its kind. Q.E.D. 

Note that we have used the symbol ^ both as the vector V and the 
component of V = (|, f '), depending on which is more convenient. 

4. Quadratic Integers 

It is clear in some sense that a surd with integral coefficients is a generali- 
zation of an integer. Gauss, in fact, defined as “integers” the numbers 
a -j- bV —1, where a, b are ordinary integers positive, negative, or zero. 
More generally, one can see that if f = a + bV D then — 2aS-\- 
(a^ — b^D) 0, which corresponds to the quadratic form — 2axy + 
(^2 _ ^ 2 £)^y 2 Gauss did insist, however, that the standard form must have 
an even middle coefficient, so that he did not regard x^ -\- xy y"^ as 
“integral” but rather worked with 2x^ + 2xy + 2i/^ as the basic form. 
The relevance to surds becomes apparent if we note that 

xy + = n{x + — 2/ j , 

and Gauss in essence rejected^ (1 -{- V —3)12 as an integer because it “had 
a denominator” or it did not arise from a form x^ + Bxy + Cy^ with B 
even. Yet at a later point we shall see that the whole development of 
algebraic number theory hinges on the use of certain numbers of type 
{a + bV D)j2 as integers, as perceived by Dedekind (1871). This new type 
of integer enabled unique factorization to be extended to quadratic fields 
in a manner analogous to composition of forms (as in the introductory 
survey). 

If we proceed by generalization of rational numbers, we can say that 
the rational number f = pjq is a root of the equation 

q^-p = 0 

^ This surd was in fact treated as an integer by Eisenstein (1844), a pupil of Gauss, but 
the significance of the proper definition of algebraic integer was not then appreciated. 
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and the integer is a root of an equation with first coefficient q equal to 1. 
An equation with coefficient of term of highest degree equal to 1 is called 
a manic equation; more generally it has the form 

{\a) f” + + . . • + = 0, (a, integral). 

Now it is clear that a general quadratic surd I = (a + bV D)jc is a root 
of the equation 

(2) - 2ac^ + (a" -- b^D) = 0. 

Without any regard for the middle coefficient, we now define a quadratic 
integer as a solution to any monic quadratic^ equation: 

(lb) + C = 0, 

where B and C are integers. Hence for if = C = 1, f = (1 ± V — 3)/2 
becomes an integer. 

From now on, for the sake of clarity, an ordinary integer will often be 
called a rational integer. 

5. Hilbert’s Example 

Hilbert gave a very famous example of an associative andmultiplicatively 
closed set (called a semigroup), which fails to display unique factorization 
because of the “scarcity” of integers. Consider all positive integers 
congruent to 1 modulo 4 : 

§:1,5, 9,13,17,21,25, 29, • • • , 441, • • • . 

If we define a “prime” number as a number indecomposable into factors 
lying in we find that numbers like 

5, 9, 13, 17,21,29, •••,49-- 

are “prime” but 25 = 5 * 5, 45 = 5 • 9, • • • , and 441 == 21 • 21 = 9 • 49 
are not. We observe that these last two factorizations are irreconcilable. 
The most convenient way to resolve the difficulty is to introduce new 
integers, i.e., to “discover” 3, 7, 1 1, etc., so that we may write 441 = 3^ • 7^. 

Actually, 3 can be “discovered” as the “greatest common divisor” of 9 
and 21. Likewise, in algebraic number theory we shall discover that 
the “greatest common divisor” can even serve as a factor. This is a result 
which requires a greater development of modules, even leading to a 
composition theory for forms. 

^ It can be shown that a quadratic surd which fails to be a solution to a monic 
quadratic equation cannot be the solution to a monic equation of higher degree (Gauss’s 
lemma). 
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EXERCISE 2. Consider the set §' of positive integers which are quadratic 
residues modulo some fixed m. Show that it has properties like those of Do 
the same for the set of positive integers = 1 (mod m) for m a fixed integer. 
EXERCISE 3. Generalize Hilbert’s set to cover all of the foregoing illustrations. 

6. Fields 

The role of algebraic integers can be seen best by starting with the 
concept of field, A field is a set of quantities taken from the complex 
numbers closed under the rational operations, namely addition, sub- 
traction, multiplication, and division (excluding division by zero). In 
elementary number theory the field of rational numbers was introduced. 

It is often convenient to extend the definition to quantities consisting 
of sets of real or complex numbers. Thus another type of field, introduced 
in Chapter I §2, is exemplified by all residue classes modulo p for /?, a prime. 
This is a set of p sets written 0, 1, 2, • * * , (p — 1). They are clearly seen to 
be closed under the operations of addition, subtraction, and multiplication, 
whereas the existence of bja modulo /? for a ^ 0 takes care of division. 
These sets form a finite field. The residue classes modulo m are not a field 
if /n is 0 and composite. For if m — ab, (\a\ ^ 1, |^| 7^ 1), then x = 1/a 
(mod m) cannot exist (as 1 = a:r leads to = abx = 0, which is false.) 

In quadratic number theory the field we consider is taken to be the set of 
surds (a + bV D)lc for a, b, c integral, D fixed and not a perfect square, 
and c ^ 0. It can be seen that addition, subtraction, multiplication, and 
division of such quantities lead to quantities of the same form. (This is 
done in elementary algebra.) This field can be written symbolically as 
R(V D), meaning that the set of surds is generated by adjoining V Dio the 
rationals. The field R{V D) is called a field over the rationals. 

We can state that our problem on “integers” is to characterize all ele- 
ments of the field /^(V D) which are also quadratic integers. 

The concept behind “field” is due to Riemann (1857), who noted, in 
regard to function theory, that the difficulties involved in defining w = Vz 
(such as the usual difficulty in sign in the radical) are no worse for w than 
for any rational function of 2 and w such as zw^ = z^V z. This is a gross 
simplification of Riemann’s contribution, but we merely emphasize the 
peculiar closeness to algebraic number theory where, say, the field R(Vl) 
has the same problem. There the important choice (sign of +V2 versus 
sign of — V2) is made only once, and this choice of sign distinguishes all 
elements from conjugates henceforth. Riemann introduced no term, but 
Dedekind introduced “Korper” (1871), in the sense of “body” or “embodi- 
ment” of elements arising from rational operations, which for awhile 
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was rendered in Latin “corpus” by British mathematicians, whereas French 
mathematicians used the cognate “corps,” meaning body. 

The word “field” seems to have been introduced by American algebraists 
who also used “realm” in the interim. Strangely enough, now, in both 
English and Russian,^ field and the cognate polye mean field in two senses, 
the algebraic sense discussed here and also the sense of vector field from 
physics. 

EXERCISE 4. Show that any field over the rationals containing (a + h V D)jc 
contains (if ^ ^ 0). 

EXERCISE 5. Show that if is square-freejthen the field generated by V Dq 
can contain no other reduced radical than V Dq. Hint. Show first that the field 
generated by V2 will not contain V 3, 



7. Basis of Quadratic Integers 

Consider next the problem of deciding when the arbitrary surd ^ of the 
field generated by V D, 

(1) I = (a + bV~D)lc, 

is a quadratic integer. First of all we extract from D its (positive or 
negative) square-free kernel Z)q, so that D = Then we can cancel 

any factor of c which divides both a and b and make c > 0 for convenience. 
Replacing 6 by 6/m, we write 

^ a + 6/^ a - 

^ ^ ^ =: , 

C C 

Thus V D and V Dq generate the same field. We see that for f to be an 
integer the coefficients in (16) of §4 for namely, 

^ and = C 



must be integers. Thus we must restrict a, 6, c (relatively prime) so that 



la 



= 



c 



and 




= C 



are integers. 

First we observe (a, c) = 1 ; otherwise, if for some prime p, p \ a and 
p I c, then for C to be an integer p'^ (which divides the denominator) must 



^ The agreement of English and Russian on the same stem for two uses of field is 
remarkable, since there is a separate word in almost every other language for the 
physicists’ vector field {Feld, champs, campo, etc.). 



46 



SOME ALGEBRAIC CONCEPTS [Ch. Ill] 

divide From = 0 (mod p^) and = 0 (mod p^) it 

follows that = 0 (mod p"^)\ but since had no square factor p \ h 
and thus p\a,p\b,p\c, contradicting our assumption that the fraction (1) 
was reduced. 

Thus since B is integral, if c ^ 1, c = 2 necessarily, and 

(2) = c2C = 0 (mod 4). 

We now consider in detail all possibilities concerning the parity of a and b 
if c = 2. We can see that unless a and b are both odd then either b, and c 
are all even or 4 | Dq, leading (either way) to a contradiction. Then 
= b^ = \ (mod 4) and, from congruence (2), Dq = 1 (mod 4). Hence, 
easily, if Z>o ^ 1 (mod 4), c = 1 . 

Conversely, if Dq = 1 (mod 4), and if a and b are both odd, we can take 
c = 2, since — B^Dq = 0 (mod 4), making B and C integral and making 
f = (a + bV Dq)I2 a quadratic integer. Likewise, trivially, if Dq = \ 
(mod 4), I is an integer if c = 2 and both a and b are even (although the 
fraction (1) will not be reduced). We cannot make c* = 2, however, if 
a and b are of mixed parity, (i.e., one odd and one even). Thus the most 
general quadratic integer is 

[ ^ , a ^ b (mod 2) if Dq = 1 (mod 4), 

(3) l = i 2 _ 

a + Dq, all a, h if Dq ^ 1 (mod 4). 

There is nothing in the discussion to exclude b = 0. Here c = 2 only if 
Dq = 1 (mod 4), and a is then also even, so that the only rational numbers 
that are quadratic integers are ordinary integers. 

Note that we have another way of stating the result in (3) if we observe 
(a + WDo)/ 2 = (a - b)l2 + Z>(1 + VFo)/2. Thus we let (a - Z>)/2 = a' 
b = b' and under the condition a = b (mod 2) we can set 

(a + bVDo)l2 = a' + b'{\ + V'd„/2), 
where a and b' are arbitrary rational integers. Thus we define 

^ if Do = 1 (mod 4), 

(4) «>o = j ^ 

7^ if # 1 (mod 4). 

Then in both cases a basis of quadratic integers in i?(V D) is [1, coq]. This 
module is designated by the symbol 

(5) D = [1, coq]. 
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Hence the most general integer in 

1) is X + yV —ly (basis = [1, 1]), 

R(V2) is a: + yVl, (basis = [1, V2]), 

R{V~^) is a; + yV~^y (basis = [1, V— 2]), 

R(V 3) is a: + yV 3, (basis = [1, V3]), 

R(V~3) is a: + y(l + V^)/2, (basis = [1, (1 + V^)/2]), 

i?(\/5) is a: H- y(l + VS)/2, (basis = [1, (1 + V5)/2]), 

R(VS) is the same as for R(Vl) (same basis), 

R{V — 12) is the same as for R{V—3) (same basis), 

i^(V20) is the same as for i?(V5) (same basis). 

The field R(V is independent of w, and so is D and its basis. 

8. Integral Domains^ 

A set of quantities taken from the complex numbers which is closed 
under addition, subtraction, and multiplication (ignoring division) is 
called a ring. If a ring contains the rational integers, it is called an integral 
domain. The quadratic integers of a fixed field R{V form an integral 
domain which we call D. For addition and subtraction closure is obvious, 
and for multiplication it suffices to work with the basis elements: to take 
the hard case, let Dq s l(mod 4). To establish the closure under multi- 
plication, we note in this case coq = (1 + V D^jl and + 

(Do — l)/4. Thus {a + ho)^(ci -h h'coo) = aa! + {ah* + a*h)(OQ + hb* 

= {aa* -h bb*{DQ — l)/4) + {ab* + a'b + bb')o)Q, clearly a member of the 
module [1, coq] ~ 

The closure of C makes it possible for us to discuss congruences within 
D, i.e., = fa (mod rj) if (fi ^ fg)/^ is in O. The congruences then are 

clearly additive and multiplicative as in rational number theory. Thus, 
if /(f) is a polynomial, with quadratic integers (elements of O) as coeffi- 
cients, fi = fa (mod??) implies /(fj = /(fg) (mod??). The properties 
extend to all rings. 

Note that V— 3 = 1 (mod 2) and that VI ^ 1 (mod 2) on the basis of 
the fact that (V^ — l)/2 is an integer but {VI — l)/2 is not an integer in 
each respective field. 

^ The definitions of ring and integral domain are restricted to the context of subsets of 
the complex numbers. Definitions of integral domain vary widely in the literature, but 
we follow the spirit of the original efforts to generalize rational integers. 
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THEOREM I . If the integral domain O of all quadratic integers of R(VD) 
contains an integral domain O* which does not consist wholly of rationals, 
then O* is characterized by some fixed positive rational integer n as the set 
of integers of O which are congruent to a (variable) rational integer 
modulo n. 

Proof, Clearly the aggregate of quadratic integers O, which are in £) and 
congruent to a rational integer modulo n, is closed under addition, 
subtraction, and multiplication by means of the ring property of rational 
integers. 

The converse is less immediate. Consider the terms x + yco^ of the 
arbitrary integral domain O*. To avoid a triviality (the case in which no 
irrationals occur), we note 0 for some terms. For every element 
X + 2/coo which occurs in C*, yio^ must occur in O*, since O* contains all 
integers x. We consider the smallest such \y\ ; call it n. Then, for D*, all 
terms yay^ (in x -f yo)^ must be multiples of nw^ by the lemma 1 in §3 
(above). Hence the general term of O* is f = a: + ynm^ for x and y 
arbitrary; f = a:(mod n) for all f in O*, and, conversely, all such ^ have 
the form x + ynoj^. Q.E.D. 

The integral domain D* corresponding to n is written Thus Oj = D. 

EXERCISE 6. In the field — 1) show that the residue classes of integers of 
Oj, X -1, taken modulo 3, form a finite field (see §6 above) of nine 
elements. Show that the residue classes modulo 5 do not form a field. Hint. 
5 = 22 + W 

EXERCISE 7. Write down the five residue classes of integers x + yV-l ofOi 
in R{V — 1) modulo 2 + V — |, Show that they form a field by showing a 
residue class containing each of the integers 0, 1,2, 3, 4. 

9. Basis of 

The integers in were seen to have the form x + yntoQ. This observa- 
tion leads to several cases, depending on the residues of Dq and of D^rP = 
D. We define 

(la) (D = ^ ~ I 4-^n^Do ^ ^ ^ j (mod 4), (n odd), 

(note o) = ncjOQ — (« — l)/2); 

(lb) 0 ) = ^ if £) = 0, Dq = 1 (mod 4), (n even), 

(note o) = no)Q — njl); and 
(2) o) = V~D = nV D q, if Dq ^ 1 (mod 4), 



(any n). 
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In any case, = [I, w] = [I, nwj. The details are left to the reader. 
Note, again, that On in R(V is the same as in R{V 
The designation of the letter O for the integral domain has some histori- 
cal importance going back to Gauss’s work on quadratic forms. Gauss 
(1800) noted that for certain quadratic forms Ax^ + Bxy + Cy^ the 
discriminant need not be square-free, although /4, 5, and C are relatively 
prime. For example, x^ — 45y^ has Z) = 4 * 45. The 4 was ignored for the 
reason that 4 | D necessarily by virtue of Gauss’s requirement that B be 
even, but the factor of 3^ in D caused Gauss to refer to the form as one 
of “order 3.” Eventually, the forms corresponding to a value of D were 
called an “order” (Ordnung). Dedekind retained this word for what is here 
called an “integral domain.” 

The term “ring” is a contraction of '"Zahiring"" introduced by Hilbert 
(1892) to denote (in our present context) the ring generated by the rational 
integers and a quadratic integer rj defined by 

r)^ 4- Bf} + C = 0, 

It would seem that the module [1, rj\ is called a Zahlring because if equals 
—Bri — C “circling directly back” to an element of [1, rj\. This word has 
been maintained today. Incidentally, every Zahlring is an integral domain 
and the converse is true for quadratic fields. 

EXERCISE 8. Show that the set of integers r] in Oj for which yf = r] (mod /?), 
{p prime) forms an integral domain directly from the definition. 

EXERCISE 9. Specify this integral domain for different cases of Dq (mod 4) 
[noting that {DJp) = (mod p) according to Euler’s lemma]. 

EXERCISE 10. Give an example of a ring contained in Dj and not forming an 
integral domain. Can Theorem 1 (above) be generalized? 

**10. Fields of Arbitrary Degree 

The present course is devoted almost exclusively to quadratic fields, in 
which the basic ingredients of algebraic number theory are amply evident. 
Yet we should take a quick glance at fields generated by (say) the irreducible 
equation of arbitrary degree 

(1) -I- • • ■ -1- = 0, 

if only to see what lies beyond this course. This section, therefore, is 
wholly descriptive and the major results are unproved; they are of course, 
unnecessary for the later text. 

For simplicity, start with the irreducible cubic equation 

+ a^x^ + = 0 , 



( 2 ) 
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where flg are integers. This equation has three roots, which we 

call © 1 , 02 » ^3 There are several possible fields we could consider; for 
example, i?( 6 i), the field formed by performing rational operations of 
with rational coefficients. 

The field i?(0i) consists entirely of elements of the form 

( 3 ) ^1 = '*1 + ^ 2^1 + ^ 3 ^ 1 ^ 

where rj, and are rational. This is not obvious (see Exercise 14). 
Furthermore, the field may or may not contain 6^ (see Exercises 15, 
16, and 20). This is an alternative we tend to overlook in the quadratic 
case in which both roots of a quadratic must, of course, generate the same 
field, since they “share” the use of V D. At any rate, if does not 
contain a new field which can be called i?( 0 i, 62 ) is formed by rational 
operations on both and Sg- Then 62 ) is larger than Rifi^ (in the 
sense that /?( 6 i, 63 ) itas all elements of R{Q^ and more elements in addi- 
tion). Otherwise i?(0i, 0^ is merely ^(^i). 

Generally, we can speak of 0 and <l> (instead of 6-^ and 63 ) ^s any two 
algebraic numbers with no specific relation between them, e.g., 0 might 
satisfy (1), whereas (j> satisfies an equation of degree m. Then there exists 
a number y) of degree no greater than nm such that R{^p) = R{<f>, 0) (see 
Exercise 17). If the degree of xp is actually nm, we say one of two things: 
either R{y)) is a field of degree m relative to i?( 0 ) or R{^) is a field of degree n 
relative to i?(<^). The fact that there are two such characterizations is 
extremely important^ later on. 

Here we mention another point, also easily taken for granted in the 
quadratic case, where any surd {a + bV D)jc generates the same field as 
V D, as long as 0. We must think, in general, of a field as an aggre- 
gate of elements, independently of generators, since in the cubic case there 
may be no special number like V D which would seem to be the “logical” 
generator. In fact, in the preceding paragraph it may sometimes be more 
convenient to think of R{^p) as i?(</», 0 ) or to think of two simultaneous 
generators instead of one, altogether. 

Returning to the cubic field /?(0i), every element satisfies a cubic 
equation of type ( 2 ), whose coefficients may be quite difficult to calculate 
(see Exercise 12). If the equation has = 1 or is monk, and all other 
coefficients are integral, then f j is called an algebraic integer, as in the 
quadratic case. We should like to be able to think of our field as an 
abstract collection of numbers having many possible generators; yet if 0 i 
were chosen correctly formula (3) might include all algebraic integers in 



See the Concluding Survey. 
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the field if we restrict to all rational integers. This cannot always be 

done. The best we can do is to say that for an integer, the fractions 
ri, rg, and rg are integers or at worst have a denominator that must divide 
some constant integer Q. 

This result need not be wholly mysterious. For instance, we write (3) for 
all three conjugates assuming that fj, Ig? ^3 ^3 ^^e algebraic 

integers. We also note the determinant: 



+ T201 + 


1 e, 0,^ 


fz = ri + >-202 + T202^ a = 


1 03 02=* 


. ^3 = '"l + ’'2^3 + '■ 3 ^ 3 ^ 


1 03 03^ 



If we eliminate rg and rg, for instance, we find an expansion 

( 5 ) r, = mw - W) + - W) + - W)v^- 

Now A can be expanded incidentally as 

(6) A = (01 - 0,)(02 - 03)(03 - 0i). 

There are similar expressions of rg and rg, always with denominator A. 
We then use several results that are not proved here : 

(a) The so-called discriminant of 0^, A^ = D, is a rational integer 
(see Exercise 21). 

(b) The algebraic integers form an integral domain. 

(c) A rational fraction cannot be an algebraic integer unless it is a 
rational integer. 

Thus each can now be written in the form yJA = ^,/Z), where 
(= A^j) and are algebraic integers. Hence Dr^ = is an ordinary 
(rational) integer and = zJD, which has the desired form, since Q = 
D, for example, serves as denominator. The numerators z^ are, of course, 
not arbitrary, any more than in the quadratic case [see (3) in §7 (above)]. 

It might suffice to say that the integral domain has a basis of n algebraic 
integers (which can be selected generally with much more difficulty than 
in the quadratic case). We have no occasion to do this here for n > 2. 

The following exercises might clarify some of the difficulties to which we 
allude. 

EXERCISE 11. Show that all powers of 0 ^ are type (3) by induction. Assume 
6 ^^ = and multiply both sides by using (2). 

EXERCISE 12. Show that satisfies a cubic equation by showing 1, 

to be numbers of type (3) and by subsequent elimination of the powers of 6^. 
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EXERCISE 13. Show that if I* = /"i + expresses the three con- 

jugates (/ = 1, 2, 3), for of type (3), then show that ^2^3 has an expansion of 
type (3). Hint. 

^2^3 = ('‘1 + ^2^2 + '' 3 ^ 2^)(^1 + ''2^3 + ''3^3^). 



and note that from the root properties of (2) 

^2 “t" ^3 “ “ ^i» ^2^3 “ 

0^2 + q 2 ^ (0^ + 0^)2 _ 20^03; 1/01 = -(Vi' + aA + 

+ 03^^2 = (^2^ + ^3^)(^2 + ^3) - (^2 + ^3)" + 30203(02 + 0 ^). 

EXERCISE 14. Show that all elements in R(di) are type (3). (Note carefully if 
you are dividing by zero at any time!) 

EXERCISE 15. Consider the pure cubic equation 

= ab^y {a > \y b > \y ab > \)y 

where (a, b) = 1 and a and b have no square divisors. Show that R(ab^Y'^ does 
not contain R{p{ab^Y^) where p = ( — 1 + an imaginary cube root of 

unity. 

EXERCISE 16. Show R{p{ab^)y^) does not contain p\ab^)y. 

EXERCISE 17. Show that \f rp = p (ab^)^ then R(y)) contains p and (ab^A 
Also write the rational equation defining y). 

Hint. Solve for p by combining (y) — pf = ab^ with p^ = — p — I in the 
expression for p. (Do not “rationalize” the denominator.) The conjugates of yf 
are, incidentally, p -h {ab^)y, p 4- piab^Y^y p + p\ab^Y^y p^ + (ab^Y^^ + 

piab^Y'^y P^ + p\ab^Y^- 

EXERCISE 18. Show that the field generated by Va + V0 = | contains ^ab 
and Va and ^b. Show that ^ satisfies an equation of fourth degree. 
EXERCISE 19. Show that the (cyclotomic) equation 

(A7 - 1)/(A 1) = A6 + + 24 + 23 + + A -h 1 =0 



has as its six roots A* = exp l-nikll ( = cos Inkll 4- i sin 27 t/:/7), 1 < ^ < 6 . 
EXERCISE 20. Show that //*. = A* + 1/A^ = 2 cos iTrkjl satisfies the equation 
^3 ^2 _ 2// - 1 = 0. 



From this show that the three roots satisfy 

P-2 ~ Pi "" 2 , Pz ~ Pz ““ 2 , P\ — P^ “ 2 . 



(Thus R{fiy) = R{fi^ = 

EXERCISE 21. Multiply the determinant A by its transpose (rows and columns 
interchanged) and verify that for rational Si 



Aq Si S 2 

51 S2 S^ , 

52 A3 A4 



A, 



3 






D = A* = 
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[Sec. 10] FIELDS OF ARBITRARY DEGREE 

EXERCISE 22 (Dedekind). Show that the number 

= [1 + b{a^by^ + a{ab^)y^]l7, 

is an algebraic integer in R{ab^)y if = b^ (mod 9). Hint. Show that the 
numbers 

^2 = [1 + b{a^b)yp + a{ab^)yp^]j7> 

^3 - [1 + b{a^b)yp^ + a(a^b)yp\l3 

are conjugates or that {x — — ^ 3 ) has rational integral coefficients. 




chapter IV 

Basis theorems 



1. Introduction of n Dimensions 

The main result of Chapter IH, after the introduction of new terms, was 
a very simple one, namely the expressibility of a certain module by 
means of a basis [1, o>q] and similarly for the integral domains associ- 
ated with (in §7 and §9 of Chapter III). 

Two questions are natural: 

Is the situation as simple for the basis for an arbitrary module ? Is there 
an easy relationship connecting different bases that can be used for an 
arbitrary module? 

The answers are “generally” affirmative and lead to an interesting 
theory. For simplicity it is actually equally convenient to act in somewhat 
greater generality (taking more than two dimensions) . The degree of gener- 
ality achieved will also be useful in Chapter V when we make further 
applications. 

2. Dirichlet’s Boxing-in Principle 

The general techniques for constructing a basis, however intimately 
connected with algebraic number theory, were not fully appreciated until 
very late (about 1896) when Minkowski, in his famous work Geometry of 
Numbers, showed in detail that considerable significance can be attached 
to the seemingly simple procedure of visualizing a module coordinatewise. 
Although the usefulness of Minkowski’s techniques is not appreciated fully 
when restricted to the quadratic case, these techniques have a starkness and 
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an appeal to fundamentals, which command recognition in their own right, 
as they bring out the importance of geometry as a tool of number theory. 
A well-known earlier example of geometrical intuition is the following: 

dirichlet’s boxing-in principle (1834) 

If we have g I objects distributed among g boxes so that each box may 
have any number of these objects {or none at a//), then at least one box will 
contain two objects. 

The principle is obvious. To apply it, let us consider the following 
version : if we have more than Af ” points in an «-dimensional unit cube, 
where Af is a positive integer, then two points exist each of whose n 
projections (coordinates) differ respectively by no more than l/Af, 

(Of course, a one-dimensional “cube” is a line segment, a two- dimen- 
sional “cube” is a square, etc.) For proof we simply divide each side into 
Af parts yielding a total of Af” cubes. Then, if more than Af” points are 
present, two must lie in one cube. 

3. Lattices 

For an arbitrary module 9Jl a basis was defined (Chapter III, §3) as a 
finite set of elements of (or vectors) Uj, Ug, ’ • * , u„ for which the com- 
binations denoted by 

(1) u = + X 2 U 2 + • • • + 

for integral n-tuples (ajj, • • • , x^) account for all elements of 9JJ. We 
also express (1) by saying u lies in the space spanned by u^, Ug, • • * , u„ 
(implying integral coefficients xj). 

An arbitrary module need not have a basis. For example, the set of all 
rational numbers (positive, negative, and zero) has no basis. [For, if 
Ui, ’ • • , u„ corresponded to fractions pilqi, ■ • * ,pjqn^ theri we could not 
obtain all fractions in (1), since the denominators are limited, as the reader 
can easily see.] Thus the elements of a module cannot be expected to be 
“too close” if the module has a basis. The matter of “not being too close” 
is expressed by means of two^ terms : finite dimensionality and discreteness. 
This requires a series of definitions. 

We first introduce linear independence: a finite set of vectors in 931 
^ 2 , * * * , is linearly dependent over the integers if rational integers 
flg, • • • , not all zero, exist for which 

(2) fliVi + flaVg + • • • + = 0; 

' The “discreteness’’ implies separation in the usual sense, whereas “finite dimen- 
sionality” implies “noncrowding at oo.” 
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Otherwise they are called linearly independent. The dimensionality of a 
vector space is then defined as the maximum number of linearly indepen- 
dent vectors. 

A norm is a function of the vector v denoted by ||v|| with the properties 
(reminiscent of distance from the origin): 

(la) \\ay\\ = \a\ • ||v|| for a rational^, (linearity), 

(2b) II Vi + V 2 II < llvill + ilvgll, (triangular inequality), 

(2c) 0 < ||vl| with equality only for v = 0, (definiteness). 

A discrete module is one in which a norm exists such that 
(Id) ||v|| >k when v^O 

for k, a fixed, positive constant. There may be several norms satisfying 
this property (but all norms need not do so). 

A lattice^ is finally defined as a discrete, finite dimensional module. We 
shall use gothic symbols S, SI, O to denote lattices as well as modules. 

We can easily check that the module of all integers f in D has both 
properties and is therefore a lattice. We see that the dimensionality is two, 
since for every | = x + i/coq the three quantities f, I, coq linearly 
dependent (i.e., 1 * f — x • 1 — ?/ • coo = 0), whereas 1 and ojq are linearly 
independent by the irrationality of a/d. The discreteness follows from 
(many) choices of ||f||, including 




Here the properties (2a, b, c) are not wholly trivial. Property (2a) is easy; 
property (2b) is left to §4 below. To show property (2d), note that since 
(|f| — 1^1)^ ^ on expanding, we find 

|fl2 + iri^>2|^ri-21iV(01. 

Thus, unless ^ = 0, from the fact that |A(f)| > 1 it follows that for each 
I, ll^li > 1. Furthermore, ||||| = ||f'|| and ||a|| = |^|, with rational tz. 

^ As a matter of convenience, we define fractional combinations of vectors by saying 
Wi = means = pwz. The fact that this use of fractions is consistent is similar 
to the fact that the use of fractions in ordinary or modular arithmetic is consistent (see 
Chapter I, §1). Thus (2a) gives an extension of the norm symbol when a is rational. 

2 The geometrical idea of lattice was used by Gauss (1800) and is called Git ter 
(German), treillis (French), reshetok (Russian). An independent concept in algebra 
was introduced by Dedekind (1894) under the name Dualgruppe, more recently Verband 
(German). The English word lattice was unfortunately also used by algebraists for the 
other concept (adding to the confusion because Dedekind had been motivated by 
module theory !). In Russian the word struktur is widely used but not in French or 
English. 
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A submodule of a lattice is clearly a lattice, since the properties all carry 
over. It is called a sublattice. Thus any quadratic module is a lattice of 
dimension 2 or less and a sublattice of O. 

4. Graphic Representation 

To illustrate the ideas, note that the lattice of integers in a quadratic 
field can be represented in the real and imaginary cases by a suitable 
choice of coordinates. We can represent f by (|, S') in a real field (Figure 
4.1) and by (Re S, f) in a complex field (Figure 4.2). 







FIGURE 4.1. Representation of a + bco^ in the plane: Z>o = 5, 1 becomes (1,1), coq 
becomes [(1 + V5)/2, (1 - V5)/2]. 



We can easily verify in both the real and the imaginary quadratic cases 
that Ilf II = [(If 1^ + |f'|^)/2]'^ is the distance from the point representing f 
to the origin divided by a constant factor to ensure that f = f ' = 1 will be 
at unit distance. Thus property (2b) of §3 for the norm (3) of §3 is a 
consequence of this general result (expressed in n dimensions) : 

The triangular inequality. If (f ‘ , f J, (ri^, • • * , t^„) are real w-tuples, 



/ n \i/i / n r n 

+ (.2 ^ xy* + 



'A 



( 1 ) 
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Im^ 




FIGURE 4.2. Representation of a + 6o>o in the plane: Dq = —2, 1 becomes (1,0), 
V —2 becomes (0, Vl). 

To prove^ this inequality, we might square both sides to obtain 

2 + 2(2 + 2 ^ 2 + 22 + 2 Vi^- 

On canceling squares, we obtain 

This is a consequence of the so-called Cauchy-Schwarz inequality, 

( 2 ) 

The last result comes from the identity of Lagrange, 

(3) (2 fi^)(2 Vi) = (2 + 2 (^iVi - 

i>i 

Thus working backward from (3) we prove (1). (We are interested currently 
in n = 2, although the arbitrary n is required later on.) Q.E.D. 

Thus the integral ^-tuples x = (x^, • • • , x J form a lattice with norm 

llxll = (x ^2 + . • . + Note for x 7 ^ 0, ||x|| > L 

EXERCISE I. Sketch the lattices for C>i in the cases Dq ^ —5 and = 2. 

EXERCISE 2. Write out identity (3) for n — 2 and n — 3 and state when the 
equality can prevail in (2) and (1). 

5. Theorem on Existence of Basis 
THEOREM I. Every lattice has a minima! basis. 

We begin with some incidental remarks. First of all, the converse of the 
main theorem is a simple matter, 

^ All summations henceforth are from 1 to « on the indices. 
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THEOREM 2. A module with a basis (minimal or not) constitutes a 
lattice. 

Proof. We consider the element u of 3K represented by the basis as 
u = iTjUi + • • • + as in (1) of §3 (above). In general, many repre- 

sentations are possible, but we define 

(1) Hull = * -h 

for the representation which yields the smallest possible value. To use 
the triangular inequality, note that if another v is represented by v = 
2 /iUj 4“ * * • + Vn^n fo** purposes of norm the vector u -h v would have the 
representation -j- ?/i)ui + • * * + (a:^ + among others (possibly). 
Thus 

I|U + y\\ < < (2^;/)''^ + (22//)*^ = Hull + ||v||, 

and the rest of the norm properties are verified quickly. The finite 
dimensionality is a form of Cramer’s rule for systems of linear equations. 
Any n + 1 vectors of 501 must have a linear relation with integral coeffi- 
cients not all zero. (See Exercise 3 below.) Q.E.D. 

As a major consequence of Theorem 1, using the minimal basis, we can 
replace the element of 50t, u == x^n^ + * • • + by the vector of lattice 
£„, X = (x^, a; 2 , • • • , xj, whose components x^ are rational integers. The 
addition and subtraction of two vectors in 501 by uniqueness, becomes an 
operation on the vectors in £„. Thus, it follows that every lattice is 
equivalent^ to a lattice of integral w-tuples. 

To get right to the main result. Theorem 1, the central difficulty of the 
proof is that a lattice can be of dimension n, yet might not clearly have a 
basis of n elements. For example, the quadratic module 

(2) an = [35\/3, 8 - 28\/3, 6 - 2lV3] 

is generated by a set of 3 elements. It actually has a nonobvious, two- 
element basis, as we shall see as an exercise : 

(3) an = [10, 8 + 7 a/3]. 

With this in mind, we proceed with the proof; let our lattice £ of 
dimension n have n linearly independent vectors Wj, Wg, * * • , w„ (which 
still are not necessarily a basis). Any other vector w of the lattice £ need 
not be a linear integral combination of these w^, yet w satisfies a relation by 
virtue of linear dependence, 

(4a) gyi = + • • ■ + 

^ Yet in algebraic number theory the seemingly difficult norm (3) of §3 (above) can 
still be more useful than the simpler norm (1) for later purposes. (See Chapter VIII.) 
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where g, g 2 ^ * ' ,gn are integers (which vary with w). By changing 
signs, if necessary we can make ^ > 0. Such a representation is also 
unique to within constant factors, for, if 

(4^) g''" = ^I'wi + • • ■ + 

we could obtain two representations of ggy/ in integral coefficients from 
{Ad) and {Ab) by using a multiplier of g and g on {Aa) and {Ab), By linear 
independence, the must have the same coefficients each way, and 
g'gi = ggi or gilg = gi'lg'- 

We can show now that as w ranges over £, g has only a finite number of 
{integral) values. We are assuming, of course, that common divisors of 
‘ * » gn have been canceled out of (4a). 

To determine this result, let us assume g takes on an infinite number of 
different values. We can first of all restrict values of g^ such that 0 < < 

g. Otherwise, we can use the division algorithm to write in each case 
gi = ^ig + gi'^ where 0 < g/ < g. Then, if we write 

n 

W* = w - 

we find for our new vector w* 

(5) g'n* = 1 giV/i, 0 < ^/ < g. 

1 = 1 

The fractional coefficients for w*, withg the least common denominator, 

(gl'lg^gz'lgy ■ • ■,gn'lg) 

are points of a unit n-dimensional cube. Let m be some integer. If there 
are more than such points, by the Dirichlet boxing-in principle, these are 
distinct points w*, wf of a cube, each of whose fractional coordinates is 
closer than 1/m. Thus, writing the difference, we see 

(ба) w* - wf = rjWi + r^yi^ + • • ■ + r„w„, \r^\ < 1/w, 
and by the triangular inequality, extended to n summands, 

II w* - wt II = i < 2 II r^w,- 1| , 

i=l i=l 

(бб) ||w* - wfll < 2 |r,.| llwJI < 2 ||w,.||/m. 

i=l i = 1 

But since m can be arbitrarily large, we shall have a vector w* — = 

Wo ^ 0, whose norm can be made arbitrarily small, causinga contradiction. 

Q.E.D. 
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Hence we can write an arbitrary w in S in the form 

n 

( 7 ) 

i = l 

and, using the value G = max g with G! = //, we can write for any w in £ 

(8) Hw = J; {H fixed), = gfHjg, 

i = l 

although none of the fractions GJH need be reduced. 

As a first step^ in our lattice £ of dimension w, for any set of n linearly 
independent vectors (wi, * • * , w„), an arbitrary vector of £, namely w, is 
expressible by (4) with a fixed value of g, namely H. 

We next define a set of sublattices £^^^ £<^^ * • • , £^”\ as follows: £^^^ 
is the set of vectors v of £ which are linearly dependent on ; let £^^^ be 
the set of vectors v of £ which are linearly dependent on and W 2 . 
Clearly, £<^^ contains £^^^ More generally, let £<*^ be the set of vectors v 
of £ which are linearly dependent on Wj, • ‘ , w^., or those v satisfying 

(9a) Hy = + * * • + (x^ integers). 

Of course, Xj^ (in fact all x^ could vanish. Ultimately, £^”^ = £. 

We now define Vjj. as some vector v of form (9a) in £<*^^ for which Xj^ takes 
on the minimum positive value (say) gj^ for any k. 

We assert that [vi, V 2 , • * * , v J constitutes a minimal basis of £. This 
involves showing that any v belonging to £ can be represented uniquely as 

(10) V = 2/iVi + 2 / 2 V 2 + • • • + 

where the yi are integers. We leave uniqueness as an exercise and prove the 
representability as follows: 

LEMMA I. For all v in £<^^ represented by (9a), the values of are all 
multiples of the minimum positive value of 
Proof To see this, we note that the values of determined by (9a) are a 
module by the module property of The Xj^ are not all zero ; e.g., with 
V = Wj., (9a) becomes 

(9^) = 0 + 0 -j- * * • + 

and we see Xj^ = //, Thus by Lemma 1 in Chapter III, §3, the integers Xj^ 
are multiples of their minimum positive value gj^ (which incidentally 
divides H). Q.E.D. 

We prove the main result by induction. First, let k ^ 1. We then 
consider all v for which H\ is of the form x^yfi. Here the x- are the multiples 
of a minimal g^, whence H\i = giWi. Then for the variable v of £^^^ 
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V = (^i/gi)Vi, in accordance with (10), (with n = 1). We next assume the 
representation to be valid if v lies in and we extend it to v in 
given by (9a). Here, too, the are the multiples of some for which 
//Vfc = * • • + gjyf^. Thus, if v satisfies (9a), v — {xJgj,)\j, lies in 
and step by step an expansion of v of type (10) is obtained (with n = k). 

Q.E.D. 

As an illustration, we consider the module, ®l, of all pairs {x, y) of 
integers of the same parity, both odd or both even, i.e., x = y (mod 2). It 
is easily seen that Wj = (2, 0) and Wg = (0, 2) are linearly independent but 
no integral combination will yield (1, 1), which is also in We note, 
however, // = 2, i.e., for any (x, y) in TR, 

2(x, y) =: x{2, 0) + ^(0, 2) = xwj + yvi^. 

The minimal basis consists first of (2, 0) = v^, which is the shortest vector 
parallel to To find Vg, we ask for the smallest \y\ ^ 0 for which 2{x, y) 
lies in TR. This is given by {x, y) = (1, 1) = Vg. Hence 9Jl = [vj, We 
could also take for Vg any (x, 1) at all (for odd x), A systematic con- 
struction method (for « = 2) is deferred to §9 (below). 

EXERCISE 3. Complete Theorem 2 (for « = 2) by showing that for any three 
vectors of JR 

u = aiUi + agUg 

V = + ^2^*2 bi, Ci — integers 

w = qui + CgUg 

there exists a linear relation + Bv + Cw = 0 with integral coefficients not all 
zero. (Allow for some or all of the a^, to be zero.) 

EXERCISE 4, Verify by inspection that every element shown in (2) is generated 
by some integral combination of elements in (3) and conversely. {Hint. 30 = 
5(6 - 21 VJ) + 3(35 v'3); 40 = 5(8 - 28 VJ) + 4(35^3), etc.) 

EXERCISE 5fl. Show that the inequality (6a) can be proved without using 

n 

fractional coefficients: use Gwf 0 < G/ < G; and write out 

^Gw* — ^Gwf. 

EXERCISE Sb. Show that the representation (10) is unique or that if v = 0 all 
y^ = 0. [Hint. For some representation of v = 0 by (10) let A: be the largest 
integer for which 0 and work back to the representation of i/v = 0 by (9a).] 
EXERCISE 6a. Find the minimal basis of the module generated by the (redun- 
dant) integral vectors in each of the following two examples by inspection : 

(/) = (1, 0, 0), Wg = (0, 3, 0), W 3 = (0, 1, 1), W 4 = (0, 0, 3), 

(i7) = (1, 0, 0, 0), Wa = (0, 2, 1, 0), W 3 = (0, 0, 0, 4), W 4 = (0, 0. 1,2), 

Wb == (0, 1, 0, 1), We = (0, 0, 2, 0), W7 = (0, 4, 0, 0). 

Here a minimal basis can oe selected from among the generating elements 
listed, which is not always the case. Proceeding more generally with (//), note 
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Wi, Wg, W3, W4 are four linearly independent vectors; hence we may write an 
arbitrary w in the module as 

w — ■ + X7W7, {Xi integral), 

= 2/iWi + • • • + 2/4W4, iyi not necessarily integral). 

On expanding we find relations between and 2/i reducing to 

2/1 

y 2 ^2 + ^5/2 + 20:7 

^3 =5= Xg + Xj2 — Xg -j- 0:7 

2/4.= a^4 - ^5/2 + 2a:6 - 2^7 

Then £ <^Ms defined by 2/g = 2/3 = 2/4 = 0, and a minimal ?/i = 1 occurs when 
ccj = 1, other ~ 0, hence Vj = Wi; £ is defined by 2/3 = 2/4=0 (whence is 
even), and a minimal 2/2 = ^ occurs when x^ — \y other = 0, hence Vg = Wg; 
£ is defined by 2/4 =0 (whence again x^ is even), and. a minimal 2/3 = 1 occurs 
when a:g = 1, other x^ = 0, hence V3 = W3; £ is defined with no restriction on 
2/i, and a minimal y^ = J(= “2/3 “ “2/2) occurs when x^ = —I, other x^ — 0, 
hence V4 = (-“Wg — W3 + W4)/2. The v^, • • , V4 are another basis, expressed in 
terms of the independent set • • , W4. 

EXERCISE 6b. Show, by the above method, that a basis for the module 
generated by = (6, 8), Wg = (8, 6), Wg = (4, 4) is Wj, (w^ + Wg)/7. 
EXERCISE 6c. Do likewise when = (a, b), Wg = (6, a), W3 = (c, c). 

6. Other Interpretations of the Basis Construction 

We preserve the usual notation with fi, a given lattice of dimension n. 
It is convenient at times to use fractional notation ; thus (8) of §5 (above) 
can be written as 

(1) W = 2 (^i/H)Wi. 

t = l 

There are several equivalent forms of our basis construction. 

THEOREM 3. A set of vectors u^, Ug, * • • , u„ constitutes a minimal basis 
of a given lattice £ of dimension n if and only if the relation 

(2) w = 2 (x</G)u, 

for w in £, implies each one of the fractions xJG is reducible to an integer. 

Proof. Assume relation (2) to hold for some w with an xJG irreducible 
and C > 1. If Ui, • • • , were a minimal basis, then we could write 



(3) 



W = 2 



(2/i integral), 
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with some have two representations, from (2) and (3), for 

Gw, contradicting the minimal basis property. 

Conversely assume u^, ‘ is not a minimal basis by failure of linear 
independence. Then, if the set of is linearly dependent for some integers 
Gi not all zero and 

(4) 0 = 

then trivially the vector w = 0 can be written 

(5) W = J;(£J,/G)u.. 

i = l 

for any integer G at all (not zero) ! 

If the set u, is linearly independent, but is not a minimal basis, by the 
method of proof of Theorem 1, for some fixed integer G, all w of £ can be 
written in the form (2). But if all xJG are integers, the set of u, constitute 
a basis which must be minimal by uniqueness of coefficients (linear 
independence). Q.E.D. 

We finally achieve a geometric construction if we return to the termin- 
ology of §5 where Wj, ■ • • , w„ represents a set of n independent vectors 
and represents the sublattice of vectors of £ linearly dependent on 
Wi, * • ‘ , W;^. An arbitrary vector of £^*^ accordingly is 

( 6 ) y 

i = l 

with rational (not necessarily integral) components xJH along w^. 

THEOREM 4. A minimal basis can be constructed by Induction as follows: 
a minimal basis of £<^^ is a vector linearly dependent on and with 
minimum positive component along w^. Generally, a minimal basis of £<^^ 
consists of the minimal basis of together with a vector of minimum 
positive component along w^^.. Finally £^^^^ = £. 

Conversely, If the minimal basis of £<^^^ is formed by adjoining a vector 
to the basis of then Vj. must have minimal component along w^.. 

The proof of the converse is all that is really required. It follows from 
the fact that if the component of v* along W;^ is nonminimal, then the 
component is a multiple, s, of the minimum by the Lemma 1, §5. Then 
V* = s\f^ belongs to and 

(7) V* = + (^ZiVi + h «fc_iv*;_i), kl > 1. 

Then is expressible in terms of v^, ■ • • , etc., in terms of a 

relationship of type (2) with an irreducible denominator s, Q.E.D. 
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GEOMETRICAL CONSTRUCTION 

A minimal basis of consists of a vector [vj collinear with and 
containing no point of £ except the two extremities of Vp If a minimal 
basis of £<2^ is desired in the form [Vp Vg], then the parallelogram deter- 
mined by Vj and Vg must contain no point of £ Internally or on its boundary 
except the four vertices of the parallelogram. If a minimal basis of £<^^ is 
desired In the form [Vj, Vg, V3], then the parallelepiped determined by Vp 
V2, and V3 must contain no point of £ internally or on Its boundary except 
the eight vertices of the parallelepiped, etc. 




FIGURE 4.3. Vi and Vg are a basis of Wi and Wg are not a basis of ^2 (see A)\ 
qi and Qg are not a basis of (see B). 

Note that the line is of minimum length, whereas the parallelogram and 
parallelepiped are of minimum “height,” etc., for the minimal basis (see 
Figure 4.3). 

7. Lattices of Rational Integers, Canonical Basis 

We consider in more detail lattices 9Jl, which are sublattices of a lattice 
£„, where £„ is defined as the set of points x whose cartesian coordinates 
are arbitrary integers, with “distance” norm (see §4), Thus 

= (*1.^2. •■•>*«). - 00 < a;,. < + 00. 

Any submodule of £„ “inherits” the lattice property because it inherits a 
norm as well as a finite dimensionality. (Clearly, any vectors of that are 
linearly dependent in £„ are linearly dependent in TR by the same equation 
of type (4) in §5 and vice versa). We can regard £„ as a lattice with special 
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minimal basis 





'ui = (1,0, 0, • ■ 


• , 0), 


(la) 


Ua = (0, 1, 0, • ■ 


•,0), 




■ u„ = (0, 0, 0, • ■ 


• , 1). 



so that 



(li>) X = + Vi2^2 + * * * + 

We assume the sublattice 90^ is of dimension n, i.e., that it has n indepen- 
dent vectors qj, q 2 > ‘ > Qn* define the components 

(2) ~ (^iT) * ’ ’ > ^ I5 2, * * * , W, 

and the determinant D = ^ 0. We recall from algebra the result that 

the are linearly independent if and only if i) ^ 0, since the relation 

n 

2 qi^i = 0 constitutes a set of n linear homogeneous equations in n 

i = l 

unknowns x^. 

LEMMA 2. If D is an integer ^^0, the vectors Wj = (D, 0, 0, • * •), Wg = 
(0, D, 0, * * •), Wg = (0, 0, D, •••),*•• , are linearly independent and lie 

man. 

Proof, The linear independence of the follows from 

(3) i; fliWi = {a^D, a^D, a^D, ■ ■ ■). 

1 = 1 
n 

Trivially, ^ ~ ^ iniplies all = 0. The fact that the lie in 9Jl 

follows from the result that for each k we can solve the system 

n 

(4a) 2 = Wi 

1 = 1 

for integral b^. To do this, we write the y-component of system {Aa) 

m i = z)5,,, 

t = 1 

where 6^,^ = \ i^k = j and 0 if ^ j. If is the cofactor of it is clear 
that bi = Qiy. satisfies the system {Aa) or (4^) from elementary determinant 
theory, e.g., 

n 

5 = 1 



(4c) 



Q.E.D. 




[Sec, 7] LATTICES OF RATIONAL INTEGERS, CANONICAL BASIS 67 



LEMMA 3. A minimal basis for 9K is provided by the so-called canonical 
basis: 



(5) 



'^1 = i^iv 0 , 0 , • • • , 0 ) 

Vg = ('^21* ^ 22 * ’ ’ ’ » ^) 

V3 = (Vgj, V32, V33, • * ’ , 0) 

. = (^1. ^3. * • * . ^n)- 



where Vj is defined as the vector in the space spanned by which lies in 
2R and has the smallest possible value of v^; likewise Vg is defined as the 
vector in the space spanned by and Ug which lies in 9Jl and has the 
smallest positive value of V22^ ^3 is defined as the vector in the space spanned 
by Uj, Ug, U3, which lies in 3K and has smallest positive value of V33, etc. 

Furthermore, we can choose 



( 6 ) 



0 < V21 < Vjj, 

I 0 < V3J < 0 < V32 < V221 

[ 0 < (i > 0- 



These conditions determine a minimal basis uniquely. 

Proof. The first part is obvious under the interpretation of the construc- 
tion in terms of the given in Lemma 2. (Making > 0 is a trivial 
matter, since any vector v can be replaced by — v for the purpose of defining 
Vj.) The inequalities (6) can be proved by the divisor-quotient method. 
For instance, take n = 3 . The inequality 0 < ^32 < V22 can be ensured by 
starting with a 1^32 not necessarily satisfying this inequality and writing 
^32/^22 = ? + ^/^22 where r, the remainder, satisfies 0 < r < ^22- Hence 
V3 — q\2 lies in SK has the same (third) component as V3 but has r 
instead of satisfying the inequality. Likewise, some combination 
V3 — q\i (or Vg — q'Vi) can take care of ^3^ (or 1^21)- 

The uniqueness of this minimal basis is proved by the fact that all v^i are 
minimal, hence unique (see the geometric construction of §6), Thus, if 
2R had two canonical bases with unequal the difference v of the would 
have the ith component and succeeding ones 0. Hence the vector v is 
eligible for consideration as a for some j < i. But the yth component of 
V is the difference of two values of Vj^ and is therefore less than the 
corresponding contradicting the minimum property of v^. Thus all 
are also equal, making the same. Q.E.D. 

We introduce the integral matrix which is called mimodular if 
its determinant is ± 1 and strictly unimodular if the determinant is + 1 . We 
then consider a more general basis relation. 
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LEMMA 4. Two lattices of minimal bases [Vj, Vg, • • * , vj and [v^', 
V’ * * ’ » ^n] equivalent if and only if the bases are connected by 

a unimodular relationship: 



n 



(7) 


''i = l Ou'f/' 

i = i 

n 


C 

VI 

V! 


(8) 


V/ = I bo-v,, 


c: 

VI 

VI 






with integral coefficients. 

Proof. Assume the lattices to be equivalent. The basis elements are 
individually in [v/, yf, • • • , yf], and (7) are valid, likewise (8). Hence 
the matrices of two transformations, combine to produce the 
identical transformation of [Vj, * * * , v J onto itself. Thus 

Wij\ ’ 1^0 1 = 

and \a^^\ = \bij\ = ±1, since all coefficients and determinants are integers. 

Conversely, the system (7) can be reversed. If is the cofactor of a^j, 
the substitution easily yields 

n 

Wu\ = ±V 

i = l 

to form (8) for the unimodular case. Thus each set of n vectors spans the 
others from the unimodular property. Q.E.D. 

LEMMA 5. Two different minimal bases of a sublattice of have 
the same determinant except possibly for sign, i.e., if = [v.^, • • • , v^J, 
V/ = [Vii. • • • . for I < ; < n. then \v„\ = ± |v,/| . 

Proof. By the product theorem for determinants, if 

n 

i = l 

then 

\^ik\ = \^ii\ \^ikV Q.E.D. 

We shall call this common absolute value D. Two canonical bases with 
the same D are not necessarily equivalent, since all we have done is to 
specify the product 1 ^ 11^22 * * * fact, in so doing, we completely 

ignore the nondiagonal integers i\j.) 

8. Sublattices and Index Concept 

The preceding theory of submodules (or sublattices) of £„ can be carried 
over to submodules (or sublattices) of any given lattice £. All we need do 
is write the minimal basis of the lattice as n vectors 



^ = [“1, «2, • ■ • , U „] 
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[Sec. 8] SUBLATTICES AND INDEX CONCEPT 

and identify the element x = + * * • + with x = iCg, • • • , zj 

the element of Thus operations on elements of x in 9K correspond in a 
one-to-one fashion with operations on elements of x in (We continue 
our restriction to sublattices of dimension n.) 

From this it follows that if the modules £, ^ have the property that 

£ includes 2R and iDt includes 5R then a set of minimal bases can be found 





■ it = [u„ • • • 


■ , Kl 


(1) 


an = [y„ • • ■ 


> ^n]> 




ai = [wi, • • 


■ , w J, 


such that 


II 


U,, 


(2) 





n 

Wf = 2 
L J = 1 



or, if (c„) represents the product of the matrices (6„) and (a„), then 

n 

(3) 

3 = 1 

Thus we have the following lemma : 

LEMMA 6. If £ includes 551 and 551 Includes 91, then if the minimal basis 
of £ in 551 has determinant A and the basis of 551 in 91 has determinant 6, 
the basis of £ in 91 has determinant ^6. 

We next consider any two modules in £„ namely 551 and £, where 551 is 
contained in £. Then, if vectors x and y belong to £, we say 

(4) X = y (mod 951) 

if X — y belongs to 551. By the module property, this definition permits 
addition and subtraction, hence multiplication by a rational integer (but 
not necessarily by an algebraic integer). This definition is also consistent 
with the ordinary congruence modulo 951 if £ is the (one-dimensional) 
module of rational integers. Congruent vectors constitute an equivalence 
class in the same sense as congruent integers. 

The number of different classes will be seen to be finite. It is called the 
index and is written j — [£/951]. Thus the classes form a finite module of j 
elements which is denoted by the quotient symbol £/551. 

LEMMA 7. If £ contains 551> the index j of £/951 is the absolute value of 
determinant of the basis expression for 551 in terms of the basis of £. 

Proof. It suffices to take £==£,, by the opening remarks of §7 (above). 
We suppose 551 to have a canonical basis as described in Lemma 2, §7. We 
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show every vector of £„ is congruent modulo to one of the following 
|/)| = V 11 V 22 ' ■ ■ t’rm incongruent vectors: 

(5) t = (/i, , tn). 0 < /i < y,,. 

We begin by taking an arbitrary vector in namely, w = (wj, • • • , wj. 
We then subtract a sufficiently large multiple of v„ (see Lemma 3 of §7). 
according to the familiar division algorithm : letting we 

see that w — qy^ has the «th component satisfying (5). Then working 
with just (n — 1) first components of w — qy^, we produce the {n — l)th 
component in an expression of the form w = — q'yn~v Thus, by 

induction, w is congruent modulo to a vector of type (5). No two vectors 
of type (5) are congruent modulo (see Exercise 8 below). Q.E.D. 

Lemma 8 is a corollary. 

LEMMA 8. If j = I in Lemma 7, = fi. 

The index, by definition, is independent of basis. It constitutes an 
invariant concept to replace the determinant (which is seemingly dependent 
on the particular basis). 

EXERCISE 7. Prove that the index j has the property that, for any element v of 
£,yv belongs to Show this two ways, first by using the determinant property 
and second by using the subgroup definition (i.e., that is an additive subgroup 
of £). 

Thus if is a module in by taking v = 1, show that any modulo contains 
the integer y, equal to its index. 

EXERCISE 8. Show that no two vectors of type (5) are congruent modulo 
(by showing the difference between any two such vectors is either 0 or inexpressible 
by the canonical basis of Lemma 3, §7). 

9. Application to Modules of Quadratic Integers 

A module of quadratic integers in D, an integral domain, now presents 

three alternatives: 

(a) The module may consist wholly of zero. 

(b) The module may be of dimension one. 

In these cases consists of multiples of a quadratic or rational integer 
(possibly 0) and is relatively uninteresting. 

(c) In the nontrivial case the canonical basis, by Lemma 3, is 

(1) 931 = [ 12 , + coj], a > b ^0, c > 0. 

Here a is the smallest absolute value of a rational integer in 931 (not 0), and 
Z) + ecu is a term of 93t with the smallest positive coefficient of cu. 
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[Sec. 9] APPLICATION TO MODULES OF QUADRATIC INTEGERS 

In practice, a module might be written with an excessive number of 
elements, and our object is to choose clever combinations of these elements 
to form a minimal basis of the original module, as illustrated in (2) and (3) 
of §5 (above). Thus we may be confronted with a module having the 
(nonminimal) basis shown: 

9K = [fi, 

We can augment the set by any 

( 2 ) + 

i = l 

for integral and we can remove any f ^ which happens to be noticed as a 
linear combination of others. These operations are sufficient for the 
construction of a basis. Indeed, the desired minimal basis vectors, belong- 
ing to the module, have the form (2); moreover, once they are put in, the 
original vectors may be dropped, since they are necessarily linear com- 
binations of the minimal basis vectors ! 

We want to obtain the basis in canonical form, so we set 

(3) = [^1 + bxO), «2 + ***>«<+ b^o)] 

and proceed by induction. Thus 

{Ad) 5312 = [^1 + a^ + b^o)]. 

The most general element of is 

^i(^i + b^w) + a;2(a2 + b^oj) = {x^a^ + x^a^ + {x^b^ + 

hence the most general rational integer of 'IRg is a multiple of x^a^ + 
x^a^, = a, where x^ and x^ are the smallest integers not both zero which 
permit x^by^ + ^^b^ equal zero, or x^jx^ = —bjb^ reduced to lowest 
terms. Futhermore, the term with the smallest nonzero coefficient of co 
has form b coj where c = gcd (/?i, b^, since c divides all Xy^bj + xj?^ 
and can be expressed as such a combination. Finally 

(Ab) 2R2 == [«, ^ + ctt>]. 

Now if we consider 5R3 = [a^ + byO), a^ + b^oy^ + b^(d\y then 9JI3 = 
\a, b -h co>, «3 + b^oj], and we can reduce [b + cco, a^ + b^oy] by the same 
procedure to the form [d, b' + cay] ; thus 

(4c) 2JI3 = [a, a\ b' + c'o)]. 

Then we note [a, d] = [gcd(a, d)] = [a"]. This, in fact, is the Euclidean 
algorithm. Hence, == [d\ d + c'a)]. Likewise 93?^ can be reduced to 
canonical form step by step. 
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EXERCISE 9. Reduce to canonical form, the following bases: 

= [35v^3, 8 - 28 V 3], 

= [35 V3, 8 - 28 V 3, 6-21 V3], 
a«4 = [35 V3, 8 - 28 V3, 6 - 21 V3, 85]. 

EXERCISE 10. Show that for every linear transformation 

jx' ax by ad -- be = n(^ 0) 

\y' ^ cx + dy 

a unique set of integers A, B,C, P, Q, R, S exists such that the transformation can 
be expressed as a result of the transformation 

ix' = Ax" + By" AC = \n\ 

\y' = Cy" 0 < B < A 

together with the transformation 

ix" Px Qy PS - QR = ±1. 

\y" ^ Rx Sy 

Hint. Make use of a canonical basis (A, 0), (B, C) for the module in 
generated by the vectors = (^7, c), Wg - (b, d). 

10. Discriminant of a Quadratic Field 

Let a module 931 in Oj for R{\/ D) be expressed with a two-element basis 

( 1 ) ^ - [f 1, f 2], 

where and fa belong to We define 

(2) A = A(a«)= 

fi' ^2' 

as the different of the module. We next see that the different A 0 if and 
only if f 1 and fg are linearly independent (equivalently if and only if the 
dimension of 9[H is two). For we see that A = ~ (^1/^2)']? 

hence A = 0 if and only if (f i/f 2) is equal to its conjugate and consequently 
to a rational fraction (say) rjs. This violates linear independence (with 
integral coefficients) for and fg (e.g., rfa — *yfi = 0). 

The module of all integers of an integral domain (in the terminology 
of Chapter III, §9) is 

(3a) 



= [\,nwo\. 




[Sec. 11] FIELDS OF HIGHER DEGREE 
It has a different 
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(3b) A = A(DJ = n(a)Q - ) = 

A more important quantity is 



f 

Do, 



if Dq = 1 (mod 4), 
if Dq ^ 1 (mod 4). 



(4) 



d(W) = d= 



the discriminant of the module JR, which we see is always an integer: 

{ if Do = 1 (mod 4), 

(5) diOJ = 

Un^Do if Dq ^ 1 (mod 4). 

In general, if JR is a module of integers in 

(6) A(JR)=yA(OJ, and « =yV(OJ, 

where j — [O^/JR], the index of JR in This follows from the determin- 
ant multiplication property. Very often, for convenience, we refer to the 
discriminant d of Dj as the “discriminant of the field R(V Do)” or as the 
“fundamental discriminant” (of this field). 

Thus, starting with d(D^ = d, we note either 

DQ~d=\ (mod 4) or Dq = d/4 ^ 1 (mod 4), 
and Dq(^ 1) is square-free. We can now unify past notation by writing 



(7) 


= [1, coj, « > 1, 


where 




(8) 


[d - 

~ ” 1 2 / ’ 


and 





A(0„) = nV d whereas d(D^ = n^d. 



EXERCISE 11. By a direct comparison with Chapter III, §9, verify (7). 
EXERCISE 12. Verify (6) directly by calculating A(JIl) for JR =[a,b co>„]. 



**11, Fields of Higher Degree 

The problem of constructing a minimal basis of the algebraic integers in 
fields of degree n is one that in general is subject to the “existence” type 
of argument and amply illustrates the power of the abstract methods of 
this chapter. Suppose we start with (say) the field R(6) where 6 is of degree 
«; then, as we noted in Chapter III, §10, the quantities 

( 1 ) 1 , 6 , 62 , 
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are linearly independent, using integral coefficients, and the general integer 
of R(6) must be of the type 

(2) f + • * • + 

where are rational numbers of denominator < 0 by §5 (above). Then a 
perfectly good norm is 

(3) lifll = W + 

and if I 0 some r*. 7 ^ 0 and, necessarily, 

(4) llfll >KI >1/20 0). 

satisfying the discreteness condition. From this, the existence of the mini- 
mal basis follows. 

We observe that this proof is not based on an explicit construction ; in 
fact, there is almost no theory to help us ! In a general way we know, from 
Theorem 3 of §6 (above), that a set of integers Wj, * • • , of R{6) 
will fail to be a minimal basis if and only if another integer co of R{d) 
exists for which 

(5) Go) = + • * * + 

where G > 1, are integers and G cannot be “divided out,” This 
statement is of great practical value in establishing the basis of higher fields, 
where illustrations are deferred to the bibliography. It might suffice to 
note in the quadratic case the fact that a> is an integer in the familiar 
example 2co = 1 This indicates again that [I, V —3] does not 

form a minimal basis of the algebraic integers of R(V —3). 
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Further applications of 
basis theorems 



STRUCTURE OF FINITE ABELIAN GROUPS 
1. Lattice of Group Relations 

In earlier work we restricted ourselves, as a matter of convenience, to 
abelian groups which are representable as the product of cyclic groups. 
This representability was easily achieved in Chapter I, §5, for the reduced- 
residue class group. 

According to the famous theorem of Kronecker (1877), cited in Chapter 
I, §7, every finite abelian group is decomposable into the product of cyclic 
groups. We shall give proof by using a type of lattice basis. 

Let the elements of a commutative group of order h be written as 

^l(” ^2? ^3) * * ‘ 

Then we consider all /^-tuples of integers (positive, negative, or zero) in 
(1) (^n * * * » 

and we fix our attention on the set of all A-tuples for which a group 
relation is determined (using the multiplicative operation) 

= e. 
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( 2 ) 
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First of all, we note that 2^ is a lattice. Let us suppose that 



Then 



. . . a/'* = e. 



Thus the sum or difference of two ^-tuples in is also in 2^, 

Now 2^ will obviously contain certain simple elements. For example, if 
gi is the order of a^, a/» = e, and 2^ contains the h vectors 

-.o), 

[igi at the /th position, 1 < / < h). 



Thus, = 1 (for Ski = e), yielding (1, 0, * • • , 0), Since we have h linearly 
independent vectors (3), we can conclude has a finite index in (It 
will later turn out that this index is h,) 

Starting from the h vectors (3), we have a set that is very easy to augment 
to a finite set of vectors completely determining 2^, at least in theory, for 
the components of any vector of 2^ are each determined modulo g,. We 
can then examine every single ( 0 :^, 0 : 2 , * * • , of 2^ where 0 < a;^ < by 
the group properties to see if (2) holds. 



EXERCISE 1 . For the cyclic group Z(3) the elements are = e = a 2 ^, a 2 ^ = 
^ 3 ^ = ^ 2 - Then show that the elements of 2^ are generated by the set of 
vectors 

(1,0,0), (0,3,0), (0,0,3), (0,1,1). 

EXERCISE 2. For the “four-group” Z(2) x Z(2) the elements are (a^ =)e, 
32 , 33 , (34 =)a 233 , where ag^ = 33 ^ = e. Then show that the corresponding 
relations are, similarly, given by 

( 1 , 0 , 0 , 0 ), ( 0 , 2 , 0 , 0 ), ( 0 , 0 , 2 , 0 ), ( 0 , 0 , 0 , 2 ), ( 0 , 1 , 1 , 1 ). 

EXERCISE 3. Do likewise for the group Z(4). 

EXERCISE 4. Do likewise for the group Z(5). 



2. Need for Diagonal Basis 

Thus we can then find a basis of 2^ in triangular (canonical) form: 



Vi = (^11, 0, 0, • • * , 


0), 


Pg ^ (^21» * * ' 


■,0), 


” (^31 > ^32’ 




== ^/i2» ^hZ’> * 


* ‘ J <^hh)i 


^11^22 * * ’ ^hh ^ 
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This means that all the interrelations between elements come as combina- 
tions (powers, products, and quotients) of 





11 


a«2ia«22 


11 




’ • = e. 



If we had achieved the “diagonalized” stage in which a^j = 0, for j ^ /, 
then we could say all interrelations come from cyclic groups of order j 
generated by = e. This is exactly the same as saying that the group 
decomposes into a product of cyclic groups (even though we find many 
a,. = 1). But for this purpose, the canonical basis is not good enough. 

We must use a type of “double” reduction. We must reduce the basis 
of both 2^ and simultaneously in order to obtain a diagonal array in 
relations (1) and (2) instead of the triangular array. 



3. Elementary Divisor Theory 



We consider, in a general context, a lattice 2R which is a sublattice of 
of finite index. Then a basis of 931, namely, [v^, * * * , v J can be written in 
terms of the basis , u J of by making use of a matrix (a,,) = A. 

Thus 







II 


^12^2 + • * * 


“h 










^2 ~ ^21^1 + ^22^2 + ’ ‘ * 








(1) 


m ^ 


= • • • + -f- • . . 


“b ^sw^m 


+ • 


• + 






V( = • • • + + ■■■ 


”b 




• + «(n' 


where 




v„ = a„iUi + a„2«2 + • • • 


^nn^ri* 












ui = (l,0, 


•••,0), 






(2) 




2 - 


= (0, 1, 


• • • , 0), 












,u„ = (0, 0, 


■ • • , 1). 










nf 



Now the matrix A = {a^j) is a representative of the relation between the 
basis u, of 2^ and the basis v^ of 931. Yet still depends on the two bases, 
which can be chosen with some degree of arbitrariness. For instance, we 
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could replace the set of vectors (Ui, • * • , u J by a unimodular transform of 
the set; likewise for (v^, • * • , vj. 

Let us consider special unimodular transformations of the bases of 
or Here q is an integer and s, r, k, m denote special indices {s ^ 
k ^ m)\ 

(a) y, zb qy* v„ (v,- unchanged for i ^ s), 

(b) Ufc zb qn^ (u^ unchanged for i k\ 

(c) Vg ^ — v^, (v^ unchanged for i ^ s), 

(d) ~> — u^., (u^ unchanged for i 7^ k), 

(e) V5 <-> Vf, (v, unchanged for i 7^ /)» 

(f) ^ w^, (u, unchanged for i 7^ k, ni). 

Here the symbol should be read “replaces” and denotes an 

interchange. The transformations are generally reminiscent of admissible 
operations in evaluating a determinant, but here the important thing is 
that the operations are all reversible in integral coefficients. For example, 
the inverse of (a) is the operation =F qy^ (opposite sign) and like- 
wise for (b). All the other operations are their own inverses. Thus the 
elementary operations described are unimodular and in any combination 
constitute a unimodular transformation on and v^. The value of the 
determinant \a^^\ is preserved except possibly for sign. 

Let us observe the effect of these six rules on the matrix A : 

^ (a) zb qo^j, unchanged for / 7^ .y; /c = 1, 2, • • • «; 

(b) unchanged for; 7^ m; .y = 1, 2, • • • «; 

^ (c) -> unchanged for / 7^ .y; /c = 1, 2, • • * 

W) ^sj unchanged for; 7^ 5 = 1, 2, 

(e) (^tkr (^zfc unchanged for / 7 ^ .y, /; /: = 1 , 2 , • • • «; 

^ (0 ^s3 unchanged for j ^ k,m\ s = 1 , 2, • • * n. 

We can easily recognize (a): the addition (subtraction) of q times the 
/-row to (from) the j--row {t ^ s)\ (b): the addition (subtraction) of 
q times the /:-column to (from) the m-column (k ^ m)\ (c) and (d): the 
change in sign of a row or column; (e) and (f): the interchange of two 
rows and columns. 

THEOREM ON ELEMENTARY DIVISORS 

The exercise of rules (a) through (f) can reduce the matrix A to purely 
diagonal form. 
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Proof. We consider the smallest positive matrix element, other than 
zero, which can be created by the exercise of these rules. Call it then 
by the exercise of rules (e) and (f) we can bring into the upper left-hand 
corner to replace a^. Now, all elements of the first row (or column) must 
be divisible by z^. To see this, we shall show | for, by the exercise 

of rule (b) (with 5 = A: — I, w = 2 ), we can form a matrix in which 
^12 “ ^12 ^ positive or negative, whereas the other elements 

of the first row and column are unchanged. Clearly, if q is the quotient and 
r the remainder in the division of ^11 (= then 

Thus r 012, but 0 < r < On (= ^i) and r = 0 . This proof, incidentally, 
shows how to make the first row and first column equal to zero, except for 
the corner element z^. 

Thus the new matrix has the following form ; 




It transforms a new basis of = [uf, • • • , u„'] into a new basis of 
= [vi', * • * , v„']. We repeat the operations, using [ug', * * * , u,,'] and 
[^2 , ' * ' , leaving uf, alone. We can then achieve a value in the 
upper left-hand corner of the (« — I) by (« — 1 ) matrix with zeros in the 
second row and column. Ultimately, we obtain a diagonal matrix with 
values ^1, ^2, * * • , along the diagonal. This tells us that a new basis 
of 'JR is expressible as “diagonal-term” multiples of a new basis of 

Q.E.D. 

Thus bases of and can always be chosen as 
( 5 ) £„ = [wi, • • ' , w„], m = [ziWi, • • • , 2iWj. 

The more complete theory of elementary divisors tells us that z^ | 

^2 1 ^31 hence the term. It is nevertheless clear that the value of the 
determinant or index of in £„ is z-^z^ • • • 

Asa method of keeping track of the operations, note that we might write 
down a new basis for 2 ^ s^tid in set ( 3 ) every time we use one of the 
rules in set ( 4 ). 
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ILLUSTRATIVE EXAMPLE 

Problem. To reduce to elementary divisors, the transformation 

[vi = 2ui + 2 u2 



( 6 ) 



Vg = u. + 4ll2 



2 2 \ 
1 4 



Solution. Clearly 1 is the value of The rest is straightforward. 
(Recall that the -> means “replaces” not “becomes.”) Use operation (e), 
or interchange of rows, on the original system: 



Vi = 2ui 4- 2 u2 

V2 = Ui + 4U2- 



Let 



•V2, 



e.g.: 



Vo = Vi 



K' = Ui -1- 4ua 


[Ui - 4U2 Ui 


[ 


Let 


e.g., I 


[va' = 2ui + 2ua. 


[ U2 ^ U2, 



Use operation (b), or subtraction of 4 x Row 2 from Row 1, on the 
resulting system : 

Ui = u/ - 4ua' 

U2 = U2'. 

Use operation (a), or subtraction of 2 x Row 1 from Row 2, on the 
resulting system : 

■ ■ 

V,' - 2v/ = v/. 

Use operation (d), or column sign-change, on the resulting system: 



v/ = u/ 




( 




Let 


e-g- 


^2 = 2Ui' — 6U2^ 


W - 2vi' ^ Va', 



Vi =Ui 

Vo' 



-6U2'. 



Let 



Ul 

U2' 



«i 

U2', 



e.g.: 



Ui = Ui 



U9 = — U9 



Finally 



( 7 ) 



fvx" = u/' 


/I 




[va" = 6ua" 


\o 


6/ 



in terms of the transformations in the right-hand column above: 

iui" = Ui -t- 4 u2, 

W = - >*2> 

K" = Va, 

U" = Vi - 2ya. 



(8a) 
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Thus, for our illustrative example, (5) becomes 
( 9 ) £2 = [“1- “2] = [“1". “2"]. = [Vi, vj = [vi", V2"] = [ui", 6U2"]. 



Matrices can be used more formally^ but in the few practical problems 
here they are unwieldy. 

EXERCISE 5 . Prove the divisor property j Zg, ^2 I ^3? * by noticing from 

( 5 ) that Zj must divide the remaining matrix of order (n — 1), etc. 

EXERCISE 6. Verify that the following matrices provide a canonical basis for 
the lattices of Exercises 1 to 4 above. (See Exercise 6a, Chapter IV.) 



/' ° “'i 

(i)| 0 3 0 (ii) 

\o 1 1/ 



/I 0 0 0 
0 2 0 0 
0 0 2 0 
>0 111 , 



/I 0 0 0| 
0 4 0 0 
0 2 10 
>0 1 0 li 





/' 


0 


0 


0 


o\ 






5 


0 


0 


0 


(iv) 


0 


3 


1 


0 


0 






2 


0 


1 


0 


/ 




1 


0 


0 


1/ 



EXERCISE 7. Perform the reduction for the foregoing matrices, obtaining the 
new bases as in the illustrative problem. 



4. Basis Theorem for Abelian Groups 

kronecker’s theorem 

Every finite abelian group can be decomposed into the product of cyclic 
groups. 

Proof Let 

(1) ai(= e), ag, “ • , 

denote the elements of the group G. Let us construct a canonical basis for 
£^, the lattice of group relations determined by equating to e the elements 

(^) > ^2 5 ' ' ' > 

with the triangular form manifest as 

(3) a/ = ai'ia^‘2 ■ • • (1 < / < h). 

Now we apply elementary divisor theory to matrix This means that 
we can find bases of £* and (written for group elements, rather than 
exponents) : 

(4) A/ = • • • (a;)^^ \ < i < h, |r,,| = ± 1, 

(5) Aj- = a'J'ia^*’^ • * • a^**, 1 < i < h, = il. 

^The formal reduction theory is due to C. Hermite (1851) and H. J. S. Smith (1861) 
(see treatises on algebra in the bibliography). 
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in terms of which the system (3) becomes A/ = by (5). Hence 

(6) = • • • = A/‘ - e 

for ^ 1 , ‘ , 2^ the set of elementary divisors of Now system (6) 

represents a set of generators of all relations among the elements of the 
abelian group. By the basis property, = ±1, so that the a, are all 
expressible in terms of A^, e.g., 

(7) a, = A'i'iA' 2 ^ 2 . . . 1 <i <h. 

The group G is generated by h cyclic groups (6) in the generating 
elements A^. Q.E.D. 

Actually, many of the are 1, as an easy illustration will show. For 
instance, in the case of the four-group Z(2) X Z(2), a basis of is reduced 

/i 0 0 0 
- 0200 

from 

0 0 2 0 
^0 1 1 1 



/■ 


0 


0 


0 


1 h 


1 


0 


0 


1 to I 








/ F 


0 


2 


0 


1 \o 


0 


0 


2/ 



The left-hand matrix indicates that the group Z(2) X Z(2) is generated by 
the relations 

f ai = e, 



= e. 

The right-hand matrix indicates the generators : 
A| = e, A| = a^, 

A2 = e, A2 = 328324, 



Ai = e, 


— 84, 


Aj = e, 


A2 = 828384, 




A3 — Ug, 1 


> 

II 


> 

II 



ai — Aj, 
82 = A3, 



84 — A2A3A4 



EXERCISE 8. Write out the results (9a), (9b) in the other groups of Exercises 
1 to 4 and 6. 

EXERCISE 9. Prove 21^2 ' ‘ — h from (6). 



5. Simplification of Result 

A fairly elaborate but elementary equivalence theory of cyclic decompo- 
sition enables us to find several different forms of the basis. For instance, 
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in Chapter I, §7, we saw Z(6) = Z(2) X Z(3), but an abelian group of 
order 4 might be equivalent to Z(4) or Z(2) X Z(2) (not both). 

By the discussion in that section, once the cyclic structure is achieved we 
can assure ourselves that each cyclic group will be of order for p prime 

by breaking up each cyclic group into factors whose order is />*. Then we 
could achieve the following structure for an arbitrary abelian group G of 
order h: 

(1) G = X X • • • , 

where p^ are primes, not necessarily distinct, and k^> h = npt‘. A 
further theory, too lengthy to repeat here, shows in effect that the decom- 
position (1) is unique except for order of factors. 

The uniqueness is not needed directly for applications in this book, 
but it enables us to know the values of the elementary divisors ahead of 
time from the divisibility properties in Exercise 5, §3 (above), for a given 
group structure. For example, let 

(2) G = Z(p«) X Z(/) X Z(/70 X Z(^^) 

where p and q are different primes and 0 < a <b < c,0 < d. This leads 
to a matrix of (arbitrarily large) order h = with h elementary 

divisors. They are, however, known as follows: 

(3) 1 = Zj = • ■ • = z^_3, P« - z*_2, / = = Zft, 

since only then will §4 lead to a structure (where Z; | 

(4) G = Z(/f) X Z(/) X Z(pY) 

consistent with the definition (2) of G. 

In our applications the groups which arise will be even sufficiently 
simple that the cyclic decomposition may be deduced “by inspection.” 



GEOMETRIC REMARKS ON QUADRATIC FORMS 
6. Successive Minima 

In our previous definition of a lattice ^ we introduced at least one norm 
||v|| defined for the vectors of 931 to serve as evidence of discreteness. 

We shall carry these ideas a bit further. We shall talk only of the lattice 
of all integral n-tuples 

(1) y = (*i, • • • , *„), 

and we shall specify l|vH as a very important type of function, which we now 
define. 
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Call a quadratic form in integral coefficients 

(^) ^2» * * * i ^n) “ ^11^1^ ^12^1^2 “f ^22^2^ -J~ • • • 

+ a«x,2 + a^jX^X| + • • • + (/ < j\ 

positive definite if for all integral values except r = 0 

(3) Q(x^, - • , xj > 0. 

The definition of positive definiteness is seen to be equivalent to one we 
would obtain if we considered real values of x, instead of just integral ones, 
and there are well-known techniques of algebra for determining positive 
definiteness. A sufficient condition is that a real transformation matrix 
exists, such that 

(4) = i Ki\ ^0 

j=l 

and 

(5) <2(^1, • • • , 

i = l 

(This condition is also necessary, but we refer the student to the bibli- 
ography for further references in algebra.) 

We take 

( 6 ) M = Q(xi, ■ • ■ , X„)'-^. 

Then we can show, among other things, that ||v|| has the properties of the 
norm of Chapter IV, §3, and also that for any T the inequality 

(7) Q{x^, • • • , xj < r 

holds only for a finite number of v. The latter statement follows from the 
fact that by (5) and by (4) the coordinates x^ are bounded once T 

is assigned: 

(8) kl ■ 

y=l \j=l J 

We now define successive minima as follows: consider all v in For 
these vectors v, the norm ||v|| has a positive minimum Wj, which it achieves 
for at most a finite number of v by the property just established. Trivially, 
if ||vi|| = so does || — Vjll = We ask, less trivially, how many linearly 
independent v have the same minimum m^. Let there be k of them, 
Vg, • • • , For instance, if Q = -|- Xg^ + 3xg^, then = 1 (say) 

at V = (1, 0, 0) and y^ = (0, 1, 0). 
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Let k <n\ then consider the set of vectors v linearly independent of 
Vi, * * * , and let Wj^+i be the minimum of ||v|l for this set. The minimum 
may be established at * • * , (additional linearly independent vectors). 

Then if / < « we continue to ask for vectors v linearly independent of 
Vi, • • • , Vj, for which ||v|| takes its next minimum etc. 




FIGURE 5.1. (j>(x, y) — + xy y^. Minimal sets for y) are [vi, Vg], [vi, V 3 ], 

[V 2 , V 3 ]. 

We write for simplicity = ||vj| for all thus always 

(9) = Wg = • - = Wjfc < = • * * = < • • • < 

Figure 5.1, in two dimensions, shows the several minima for 

(10) y) ^ + xy + = {x yjlf + (3’^y/2)2, 

where and Figure 5.2 shows a case in which < m^. 

The natural question that arises is this : does the set v^, Vg, • • * , v„ have 
to be a basis of 2,^ ? The answer is affirmative when « = 1, 2, 3. This serves 
as a great convenience in a manner we shall soon describe. The answer 
is negative when « > 4, as we shall see below. This startling result some- 
how tells us that four-dimensional space is more “pliable” than lower 
dimensional space, and it was probably the first indication that out of the 
theory of lattice points would grow a special branch of number theory 
called the “geometry of numbers.”^ 

^ This name was introduced by Minkowski (1893). There is a confusing cognate, 
“geometric number theory, ’ which Landau used (1929) to denote the process of count- 
ing large numbers of lattice points in a region, as we do in Chapter X. 
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EXERCISE 10. Show ||v|| satisfies the definitions of norm in Chapter IV, §3. 
EXERCISE 11. Show the following form is positive definite: 



yy 2 ) = + xy + i/z xz. 




FIGURE 5.2. For proof of theorem in §7. 



EXERCISE 12. Do likewise for 

Vy ^y 0 = + 2 /^ + 2 !^ + ^^ + •^// + + ii-’Z + yt + Zt 



i . y + ^ + t 

r^“2— , 



2 

1 + etc. 



(In each case the number of variables is decreased one at a time, each time a 
square is completed, and removed). 



7. Binary Forms 

Let us consider how the earlier remarks apply to 

(1) Q{x, y) = Ax^ + Bxy + 

a positive definite quadratic form satisfying the conditions in Chapter III, 

§ 1 ; 

(2) v4 > 0, D = ^2 _ ^ 0, 
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We find the successive minima and m 2 belonging to [Q{x, y)f^ and 
corresponding to 

Vi = (a^i, Vi) and Vg = 

These points lie on ellipses rj) = and m^. (See Figure 5.2.) We 
wish to prove the earlier assertion that v^, Vg is a basis of £ 2 - 

If we regard and Vg as the Wj and Wg of the geometrical construction in 
Chapter IV, §5, we see that the basis property of [vj, Vg] amounts to the 
fact that the parallelogram bounded by the corners 0, Vj, Vg, Vj -j- Vg has 
no other lattice points in its interior or boundary than the four vertices. 
Otherwise, the parallelogram would contain a lattice point of £g other than 
the vertices. It can be seen next in Figure 5.2 that triangle I (shaded) would 
contain a lattice point v' other than its vertices, (for, if such a lattice point 
were in triangle II then v' = Vj + Vg would be in triangle I). By the 
convexity of the ellipse (see Exercise 13 below), triangle I lies interior to the 
locus 2(1, rj) = and thus 2(v')*^ < which contradicts the definition 
of Wg (as v' is clearly not collinear with Vj). Q.E.D. 

In Chapter XII we treat in greater detail the problem of expressing the 
form Q{x, y) under a different basis. For the time being, it might suffice to 
notice that we are in effect writing 

(3) {x, y) = x{\, 0) + y(0, 1), 

or we are using = (1, 0) and Ug = (0, 1) as a basis of £g. 

Suppose we wanted to use Vj, Vg as a basis of fig : 

Iva = (xg, + J/2U2. 

Then by Lemma 4 in Chapter IV, §7, Vj, Vg constitutes a basis exactly when 

(5) Xi2/2 - X 2 I /1 = ±1. 

In terms of a new basis, the variables become 

(6) + yvg = xui + y«2; 

or as (V, y) varies over all the integral couple (x, y), given by 

X = Axi + yxg, 

V = + ^y%- 



( 7 ) 
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also varies over all £ 2 - Note that we can solve back for integral (X, Y) by 
virtue of the determinant condition (5). Now, using (7), we see 

(8) Q(x, y) = A(Xx^ + Yx^Y + B{Xx, + Yx^)(Xy^ + Yy^ 

+ C{Xy, + Yy,Y, 

(9) Q{x, y) = A„X^- + B^XY A- Y^ 

Here the substitution (X, 7) = (1, 0) and {X, Y) = (0, 1) in (7) and (9) 
yields 

( 10 a) Ao = eC*!, 2 / 1 ) = m-Y, 

(lOZ)) Co = 2(*2. 2 / 2 ) = ^ 2 - 

Thus, since the successive minima correspond to Vj and Vg, which form 
a basis, we can write a quadratic form in new variables in such a way that 
the minima and are manifest^ as the coefficients and Cq. This is 
essentially Lagrange’s (1773) type of reduction procedure, 

EXERCISE 13. Show that the interior of triangle I is given by the points 
Avi + 2 MV 2 , where these inequalities hold : 0 <A, 0<fx, Hence, 

using the distance property for the norm, show Q(v') < (We can restrict 
ourselves to rational values of A and /u.) 

EXERCISE 14. Show that if v^, Vg, and V 3 are vectors of £2 which [v^, 

[V2, V3], [V3, Vj] are bases of £2 some choice of signs ± Vg ± V3 = 0. 

EXERCISE 15. Show that if 2(vi) = Qiy^) — Q(^z) = for three vectors 
independent in pairs, Q(v) = ± xy y^, except for a constant factor. 

EXERCISE 16. If Q(x, y) = Ax^ + Bxy + Cy^ (D < 0), and 0 < A < C, 
show nii^ < A and < C. How can the values of and determined 

by graphing Q{x, y) — C? 

EXERCISE 17. Reduce by Lagrange’s procedure the forms 
5x^ — \6xy -f 13?/^ 3^2 + 5xy + 3^/^. 



8. Korkine and Zolatareff’s Example 

The Lagrange type of reduction theory was extended to positive definite 
quadratic forms in three variables without any extraordinary occurrence, 
by Gauss and Seeber (1831). For example, the form A- A- A- 

yz + xz has three equal minima = Wg = AW 3 = 1 for {x,y,z) = 
( 1 , 0 , 0 ), ( 0 , 1 , 0 ), ( 0 , 1 , 0 ); ( 1 , - 1 , 0 ), ( 0 , 1 , - 1 ), ( 1 , 0 , - 1 ) and their 
negatives. Any three of these, indeed, are dependent or form a basis of £ 3 . 

^ As we shall note in Chapter XII, §4, — 4.4oCo = D, so that is also determined, 

except for sign, by the successive minima. 
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In (1872), however, Korkine and Zolatareff showed that the positive 
definite form in four variables 

(1) Qip^, t) = xt yt Pr zt 

has minima = ni 2 = = m^ = \ at the obvious pointsv = (1,0, 0,0), 

Vg = (0, 1, 0, 0) and V3 = (0, 0, 1, 0), as well as at V4 = (—1, —1, —1, 2), 
which do not form a basis of £4 when taken together. This was the first 
indication that the lattices in n dimensional space would have interesting 
properties for each n that would depend on n with number-theoretic 
irregularity. 

Minkowski continued the study of quadratic forms and ultimately 
generalized his results to the study of forms for which the “unit sphere” 
IG(^,2 /,“*)I < 1 is a “convex” solid. The work was undertaken for 
purposes of studying quadratic forms and algebraic numbers but was 
later taken over by the British school more or less as a fascinating end in 
itself. Mordell, Davenport, and Mahler considered the use of nonconvex 
bodies (or norms that do not satisfy the distance inequality). The 
important point historically is the parting of the ways between algebraic 
number theory and quadratic forms (whose erstwhile synthesis is our main 
objective here). 

EXERCISE 18. Verify that the form (1) is a positive definite. 

Hint, 3 Q{x, y, z, /) = Fix) + F(y) F(z), where F(x) = 3x^ + 3xt + t^. For 
which quadruples does it achieve its minima ? 




PART 2 



IDEAL THEORY 
IN QUADRATIC 
EIELDS 



chapter VI 



Unique factorization 
and units 



1. The “Missing” Factors 

From our introductory survey it is clear that the representation 
Q(x, y) = m is closely related to the representation of factors of m and 
that these factorizations are reflected in those of algebraic numbers. It is 
therefore natural to ask when an integral domain for a quadratic field 
R{V Dq) will display unique factorization into unfactorable elements which 
could then be called “primes.” 

The answer is usually negative ; the unfactorable elements do not suffice. 

Yet unique factorization can be accomplished by the introduction of 
“ideal” elements. For instance, in Hilbert’s example (see Chapter III, §5), 
we saw that the set of positive integers g, where g = 1 (mod 4), displays no 
unique factorization until one discovers additional “ideal” primes q, where 
^ — 1 (mod 4). 

The “ideal” elements in algebraic number theory were introduced by 
Kummer (1857), who found that he needed unique factorization in order 
to help prove certain cases of Fermat’s last theorem. Kummer’s ideal 
elements were actual numbers (like the primes congruent to — 1 modulo 4), 
which belonged to a more inclusive field^ than the one in which the factori- 
zation was attempted. 



^ Some details occur in the section on class-fields in the concluding survey. 
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Dedekind soon discovered (1871) that the objective of unique factoriza- 
tion could be achieved by constructing (in the same quadratic field) a 
special type of module for the “ideal” element. 

We shall first see to what extent unique factorization fails in quadratic 
fields. 

2. Indecomposable Integers, Units, and Primes 

We begin by considering divisibility in an integral domain O (as defined 
in Chapter III, §8) : we say that an element of D divides an element | 
of C in D if an element ^2 ®f O exists such that 

(1) f = ^1^2. 

We next define a unit in D as an element which divides 1 in D. (Note 1 is 
necessarily in D.) Then a unit trivially divides in D any element of D. We 
finally designate as indecomposable in O any nonunit element f for which a 
factorization (1) is possible in D only when or is a unit in D. If is a 
unit in D we say f and are associates in O. 

We can now prove the following lemmas (as exercises) : 

LEMMA I. An element of D is a unit in D if and only if its reciprocal 
lies in O. 

LEMMA 2. The units of O are closed under multiplication and division. 

We define a prime in £) as a nonunit element tt in D with the property 
that if 77 divides the product of two elements a and ^ in D, then tt divides 
a or In O. For a prime this property would hold inductively for any 
number of factors In the product. 

LEMMA 3. All primes in D are indecomposable In O. 

THEOREM I. If an element of D Is expressible as the product of a finite 
number of primes in D, it is uniquely expressible as such by rearranging 
factors and identifying associates of primes. 

Proof, If a is an element with two such decompositions, 

a = TT^TT^ * * * 77^ = ‘ ‘ ’ 

we can cancel 77^ into some 77 ,* by noticing that \ a. (The primes tt^ and 
77 ,* are then associates in O.) The proof proceeds by induction as in 
elementary number theory, and, incidentally, 5 = /. Q.E.D. 

If O is the ring of rational integers, 1 and — 1 are clearly the only units 
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in C and the definition of prime is seen to be precisely that of an indecom- 
posable element, taken with positive sign by convention. 

From now on we shall take O as some integral domain belonging to 
the field of R {\/ (as defined in Chapter III, §9), and we shall usually be 
able to omit reference to O. Unfortunately, the indecomposables are not 
necessarily primes, as is evidenced from the nonunique factorization into 
indecomposables in §6 (below). 

EXERCISE 1. Prove Lemmas 1, 2, and 3. 



3. Existence of Units In a Quadratic Field 

Before discussing indecomposable integers, we must obtain more 
information about units. We shall be aided by further specialized know- 
ledge about 0„. 

LEMMA 4. The units of £)„ are precisely those integers of whose 
norm is + I or — L 

Proof. If is a unit, then an integer a) exists for which rjo) = \. There- 
fore N{fj) N{(o) = 1 and by the result for rational units N(rj) = ± 1 (and, 
incidentally, to = fN{rj)). The converse is likewise easy. Q.E.D. 

Thus associates have the same norm in absolute value. The converse is 
not necessarily true, as we shall see. 

Another way of stating Lemma 4 is that r} (in O J satisfies an equation 
yf -- Arj ±\ = IS di rational integer) precisely when rj is a, unit in 
Still another way is to say that is a unit in precisely when y) and Ijr) 
are algebraic integers (and units) in (Note that if rj belongs to so 
does ± 1 ^ — >y.) 

THEOREM 2. Any given nonzero integer in can be expressed as a 

product of a finite number of indecomposables of in at least one manner. 

Proof. Any a of which is decomposable can be factored in 0„ as 
a = a^ag with and ag nonunits. Hence |A^(a)| = |W(oti)| |A(a 2 )| > 
|7V(ai)| and |7V(a2)|, yielding factors in of decreasing norm, to which the 
factorization process is extended. Clearly, decreasing norms make this 
process finite. Q.E.D. 



IMAGINARY FIELDS 

The study of units immediately distinguishes real and imaginary 
quadratic fields. The imaginary case is easier. 
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THEOREM 3. For an imaginary quadratic field the only units for are 
as follows: 

Y] = dbV — I, ± I for R{V — I) (four units), 

rj — — - , ± I for R(V —3) (six units), 

= j-l for other cases (two units). 

For any (n > I) the only units are = ±1 (two units). 

Proof. The most general integer of Oi can be written for a square-free 
Dp < 0 as oj = (a bV Do)j2 where a and b agree in parity if Dq = 

1 (mod 4) or are both even if ^ I (mod 4). Then we must solve 

4V(co) = + b\-Do) = ±4. 

Since Dq < 0, a solution with ^ 7^ 0 is possible only for Dq = —3, — 1 ; 
these cases are enumerated. 

In the expression for for « > 1 the value |Dol is multiplied by 
(see Chapter III, §9); hence the conclusion. Q.E.D. 



REAL FIELDS 

In a real quadratic field, however, units other than ± 1 always exist. In 
fact, this is true in any quadratic integral domain as we shall see. 

LEMMA 5. If and I2 are two real nonzero quantities and if the ratio 
fi/la irrational, then for any positive integer T we can find integers A 
and 6 (not both zero) for which 

l|A| < 7, |B| < T. 

Proof. This is one of Dirichlet’s earliest applications of his boxing-in 
principle. We begin by assuming > 0, Ig > and we define the form 

(2) /(a, b) = ai, + bi,, 0<a<T, 0 < b < T. 

We note 

(3) f(a,b)^f(a',b') if (a,b)^(a\b'), 

since otherwise (a — a')Si + (^ — ^0^2 = contradicting the irration- 
ality of Now f(a, b) takes on {T + 1)^ different values as a and b 

vary from 0 to T. These values lie in the interval between 0 and 
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(l^il + 1^21)^- Next, we divide that interval into segments /i, / 2 , * ' * , /y* 
with 

(4) -l)X<x <jX X = nifil + \h\)IT^^ 

We find that since (T + 1)^ > there must be two values of /(a, b) in the 
same interval (say) 7^, or \f{a, b) —f(a\ b')\ < L Thus, if A = a a\ 
B = b — b\ wc find integers A, B that are not both 0 for which 

(5) \f(A.B)\ <X, Ml <r, \B\ <T, 

If and ^2 positive, a minor modification of signs is made. 

Q.E.D. 

COROLLARY. If D Is a positive integer, not a perfect square, then a 
fixed integer m exists for which the equation 

(6) A2 - 62D = m 

has Infinitely many solutions in integers (A, B). 

Proof. By the preceding lemma, we can find integers A and B (not both 
zero), for which 

hA-BVD[<(l+VD)IT 
ll^l < T, |B| < T. 
for any positive integer T. Furthermore, 

( 8 ) \A + bVd\ < \A\ + \bV1>\ ^ T(l + Vd) 

and, multiplying inequalities (7) and (8), 

(9) \A^ - B^D\ < (1 + VD)\ 

Now, if only a finite number of pairs of integers (A, B) occur as oo, 
it could not be true that \A — bV D\ can be made arbitrarily small without 
equaling zero. Therefore, there must be infinitely many different pairs of 
integers (A, B) occurring as F ^ oo for which A^ — B'^D is bounded, and 
there must be at least one m for which (6) has infinitely many solutions. 

Q.E.D. 

LEMMA 6. Under the condition that D is not a perfect square, there 
must exist at least one pair of integers (a, b) for which 

( 10 ) (a:f±\). 

Proof. It is easy to insist that /< > 0 in the preceding corollary for the 
infinitude of (A, B) ; otherwise there would also be only a finite number of 
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solutions for which ^4 < 0 , and, of course, there is only a finite number for 
A = 0. 

We take (m^ 4- 1) of the solutions, {A > 0), and we separate them into 
classes according to the residues of (A, B) modulo m. There must then 
be at least two in one class, by Dirichlet’s boxing-in principle, 

( 11 ) A^ = A 51 = ^2 '”)• 

We set up ? 7 i = + B{\/ D; fj^ = A^ + B 2 V D and find 

(12) N(t)i) = N(r] 2 ) = 'w* Vi = V 2 (mod m). 

Of course, N(rjjrj 2 ) = 1, but we must still show that r]ilrj 2 = I is an integer. 
Since r} 2 r }2 = we write 

(13) f = 1 + (»/i - = 1 + - T]i)r]^’lm 

and Tj^ — rj 2 is actually divisible by m. Explicitly, 

(14) 1=1 + + y/J) - Byo) = a + bVl) 

\ m ml 

on expanding. We easily see that r\^ 7 ^ r\ 2 ^ since (A^^ B^) 7 ^ (^ 2 » ^ 2 ) 
rji 7 ^ — r? 2 , for A^ and A 2 are both positive. Thus (10) holds. Q.E.D. 

4. Fundamental Units 

We now consider the set of all units of any real quadratic The set 
contains at least one nontrivial unit ( 7 ^ ±1) by Lemma 6 , (above), since, 
with D = n^DQ, clearly contains all integers a + bV D (see Chapter III, 
§9). Consider the set of all units of (of norm + 1 and — 1). This set of 
units symbolized by {p} is a multiplicative group. We next consider the 
set of values U = {log |p|} which becomes an additive group. For example, 
the inverse is —log \p\ = log |p'|, since |7V(pOI = IMp)l = 1- Likewise, 
since A^(pi)iV(p 2 ) = MpiP 2 )» then log \p^\ + log Ipgl = log \p 1 P 2 l We 
shall see that the set of values U constitutes a lattice. Then we use its basis. 

LEMMA 7. For any algebraic integer co, of (not necessarily a unit), 
both values log |co|, log |co'| cannot be arbitrarily close to zero unless they 
both equal zero. 

Proof. Referring to Figure 4.1, we see |o)| — 1 and \m\ — 1 cannot both 
be made arbitrarily small without being zero ; for the points ( 1 , 1 ), ( 1 , — 1 ), 
(— 1 , 1 ), (“ 1 , — 1 ) must all be separated by at least a finite constant 
distance from the point (o>, o/), according to the lattice property of 

Q.E.D. 
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THEOREM 4. The set U = {log |p|} for /> a unit of constitutes a one- 
dimensional lattice. 

Proof. Since log \p\ = “log |p|, we conclude from Lemma 7 that for 
some constant k> Q 

(1) [loglplI^A: if p^±l. 

Furthermore, the quantities log Ip | are all linearly dependent (with 
integral coefficients) on any nonvanishing element value (say) log |po|. 
For otherwise some log |pil would exist for which S = log |pil/Iog |pol is 
irrational, and, by Lemma 5, we could make the absolute value of the 
function f{a, b) = (a log |pi| b log |pol) arbitrarily small in absolute 
value, indeed < k. Then the unit p = i i) would violate in- 

equality (1). Thus it must be possible for/(a, b) to vanish for integral a and 
b not both zero. 

We therefore have the discreteness conditions for a lattice. (See Chapter 
IV, §3.) Q.E.D. 

The (minimal) basis of U is a one-dimensional vector written as log 
We put this result in “antilog” form. 

COROLLARY. There exists a special unit rj^ in any £)„ such that all 
units p in are given by 

P=±Vn" m = 0, ±l,±2, ±3, 

This unit is called the fundamental unit if (for standardization) rj^> I 
also. According to this definition; rjf might be positive or negative, 
depending on Note this is precisely the unit which minimizes 

log p for p an arbitrary unit > 0. 

As an illustration in R(V 5), we can prove rji (I + V 5)/2, = 

(3 -h VS)/2, = 2 -f Vs. Note that rji^ is the fundamental unit of O 2 , 

since, by the inclusion of in Oj, the units of are all to be found among 
the units of Note also that N(rj^ = — 1. N(rj^) = +1. The set of 
integers where N((jo) = 1 is co == ^1 whenever = — 1. 

The answer to the question whether N{rj^) = +l or = — 1 for 

the fundamental unit in an arbitrary is not known completely. One 
can prove with ease that in (hence in D„) N{rj^ = *f 1 if £>o has any 
prime divisor q = (mod 4); For, if = (T vV D^jl, then the 

equation — DqU^ = —4 leads to 

7^2 = —4 (mod 7) 

as q I Dq, causing a contradiction. Furthermore, N{rj^ = — 1, if D = Dq 
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is a prime = 1 (mod 4), but this is a much deeper result, which we prove in 
Chapter XI, §2. If Dq has no prime divisor = — 1 (mod 4) the value of 
N{rj) is generally unknown, and becomes a matter of vital concern in 
Chapter XI, §2 (below). 

The table of fundamental units in the appendix is evidence of the irregu- 
larity of the size of the fundamental unit, which is governed by even weaker 
rules than the sign of the norm. 

EXERCISE 2. Give a separate proof of Lemma 6 based on the idea that co 
must satisfy an equation with discrete coefficients (integral values of co + co' 
and coco'). 

EXERCISE 3. Show ?; = (1 + V5)/2 is the smallest unit >?i(>l) for all real 
quadratic fields whatever. Nint. Consider all equations — Ax — 1 — 0. 
Solve for rj > 1 and consider dr)ldA. Likewise take x^ — Ax \ =0 and 
between these two equations choose the smallest rj. Find the next six smallest 
units ??i(>l) for quadratic fields (of whatever discriminant). 

EXERCISE 4. Construct the first 8 powers of = (1 + V5)/2 and tell which 

are fundamental units of some £>„. Note that and can be equal even if 

u ^ V. 

5. Construction of a Fundamental Unit 

As a practical matter, one could not use the Dirichlet boxing-in principle 
to construct a unit or even to construct numbers of equal norm. One 
normally would use the method of continued fractions, but this method has 
the disadvantage of being incapable of generalization to fields of higher 
degree. We shall find an “irregular” but pragmatic method in Chapter IX, 
using factorizations. In the meantime, we shall show how to verify units 
once they are found (say) in Table III (appendix). 

LEMMA 8. Of ail the units p in the fundamental unit minimizes 
Ip + p'l • 

Proof, Let p satisfy the equation, with A written for p + p\ 

p^-Ap + N(p) = 0, N(p)= dll. 

Then we can take ^4 > 0 by a choice of sign on p. We find that, whether 
N(p) is +1 or —1, the root p that satisfies p > 1 is 

(1) P = [A + Va^ - 4N(p)V2. 

Thus p obviously increases monotonically with A once N(p) is chosen as 
+ 1 or — 1 . We just have to show that the minimum value of p Ar p for 
which N(p) = + 1 exceeds the minimum value of p A- p for which 
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iV(p) = — 1. Clearly, if N{r}) = — 1, we need note only rj' = — 1/^?, 
whereas (rj'y = Thus 

(2) rf + + Ijr)^ > > rj > rj — llrj = rj + rj'. 

Hence the rj of norm -“1 has the smaller value of rj -\r rj\ Q.E.D. 

In practice, then, if some unit pq is known to satisfy 

(3) - Ap ± \ = 0, fovA = Aq, 

we need only ask which of the equations for 0 < ^ < \Aq\ has the smallest 
A and also produces a unit of The work can be lightened considerably, 
since A is restricted by 

(4) ^2 :p 4 = 0 (mod Dq). 

THEOREM 5. The fundamental unit of can be found by considering 
the smallest integer 7 for which 

(5) 72 - DU2 = ±4 7 > 0, LI > 0, 

where D = and U is taken even when n is even and ^ 1 (mod 4). 
Then the fundamental unit of is (7 + Ua/D)/ 2 and the most general 
unit is ±[(7 + UVD)/2]"^, Here D = in the usual notation. 

Proof. Note p = (T + uV /))/2 satisfies the equation p^ — Tp ± I ^ 0, 
of type (3) (above). (See Chapter III, §9.) Q.E.D. 

To construct a fundamental unit of from a fundamental unit of Oi, 
we require a special result, which will be approached in a mode of greater 
generality. 

LEMMA 9. If rj^ is a unit of then for some exponent t, 0 < t < n^, 
belongs to 

Proof Note that the most general integer of D^isa + bco^, where a and 
b are integers ; hence we consider rP residue classes based on the residue 
of a and b modulo n. If we list rji% where .y = 0, 1, • • • , we have jP + 1 
units of which two must belong to one class. Thus (mod n), 

for 0 < .?! < .?2 < n^. Now we let ~ = /, and we find for some 

integer 2 in Dj 

( 6 ) 

hence, transposing and multiplying by the integer we see 

(7) = 1 4 - = rational modulo «. 

Thus Yjy^ belongs to D„, by the basic definition of in Chapter III, § 8 . 

Q.E.D. 
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EXERCISE 5a. Find the fundamental unit of Oj for i?(Vi 3 ), starting with 
P = 18 — 5 Vl3 and considering equations of type (4). Is this p the fundamental 
unit of O 5 ? 

EXERCISE 5b. Find the fundamental unit of Oj, ^ 3 . and O 5 for R(V2) 
starting with = 1 + V 2 . 

EXERCISE 6 . Prove that every unit A of On can be written as A = r 4* 
where pi belongs to O^ and = ±l(mod n). 

EXERCISE 7. Show that a unit of (Dq square-free), can have the 

form (a -h V^)/2 for a and b odd only when Dq = 5 (mod 8 ). Show that the 
congruence is not sufficient by consulting the units in Table III (appendix). 

6. Failure of Unique Factorization into Indeconiposable Integers 

In order to appreciate the complexities of the theory of quadratic fields, 
we must accept the fact that unique factorization is not generally valid. 

A typical case is presented by the field i?(V“-5). Here we observe as an 
illustration 

(1) 21 = 3 • 7 = (1 + 2V^)(l - 2V^). 

The factors shown are all indecomposable. Otherwise, if we write 

I = fifa = 3, 7, or (1 ± lV~5), 

taking norms, V(f) = V(fi) ^(^2) = 9, 49, or 21, With the most general 
= a bV “-5, we find that we must solve 

(2) -\-5b^ = 3 or 7. 

Thus ^ is not decomposable into two factors (each with > 1), since 

(2) is an impossible equation (by trial and error). 

Now, 1 + iV —5 divides the product of two indecomposables, 3 and 7, 
but does not divide either one, since A(1 + 2 a/— 5) = 21, which does not 
divide A(3)(= 9) or N{1){= 49). There is no unique factorization into 
indecomposable algebraic integers in R(V-~5). 

Our current state of knowledge of modules holds some hope that they 
can provide the answer. We say in the introductory survey that in contrast 
to the impossible (2) 

(3) 2fl2 + 2ab + 3b^ = iN[2a + (1 + V^)b] 

does represent 3 and 7 for an obvious choice (a, b) = (0, 1) and (1, 1). 
A multiplicative theory of modules will accordingly be developed. 

Lest the reader jump at conclusions, we should note that the factoriza- 
tions involved in “indecomposability” are not always trivial. For instance. 
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it will be seen later on that i?(V 6) has unique factorization. Note by way 
of verification that no difficulty arises here with regard to the statement 

(4) 6 = (Vlf = 3-2. 

Actually, we can show V6, 3, and 2 are all consistently decomposable. 
For instance, 6 = — (3 + V6)(3 — V6)(2 + V6)(2 — V6), whereas 



(5) 



’ (3 + VeX3 - V6) = 3, N(3 ± V6) = 3, 

^ (2 + V6)(2 - VI) = -2, N{2 ± VI) = -2, 

(3 - V6)(2 + V6) = -(3 + V6){2 - V6) = V6. 



It is then an easy result to see that 6 now has the same four factors in (4) 
either way! 

The matter is still not settled because the statement “6 = (V6)^” in (4) 
should not be acceptable unless we can show 2 and 3 to be associates of 
perfect squares in i?(V6), (Vl and V3 are excluded from the field). 

We note 

(6) ( - V6) = 5 + 2V~6 = pi, 

[-(2 + V6)/(2 - V6) = 5 + 2a/ 6 = p^. 



where is a unit. Thus the factors of 2 and 3 are associates. Hence, 
finally, making use of the unit in (6), we write (5) as 



(7) 



3 = (3-V6)Vi, 

• 2 = (2 - Vlfp„ 

\/6 = -(3 - V'6){2 - V6)pi, 



which is a wholly satisfactory explanation of how statement (4) really leads 
to a unique factorization. 

With these remarks in mind, we turn our attention to some cases in 
which unique factorization succeeds and is easily demonstrated. 

EXERCISE 8 . Show that, if p and q are primes, then, in R{^ —pq), —pq = 
^ —pq yj ^pq — .— (^)(^) represents a factorization in two irreconcilable ways 
into indecomposable algebraic integers. 

EXERCISE 9. Assume for odd primes p and q that {qjp) = {pjq) == —1 (in 
Legendre symbols). Then show that for neither sign is px^ — ^^2 _ ^4 solvable. 
From this show that pq = ^pq ^pq — {p){q) is a “nonunique” pair of factoriza- 
tions into indecomposables in pq). 

EXERCISE 10. Show that in R(Vl4) the relation 14 = -7-2 does 

not violate unique factorization by finding integers of norms equal in absolute 
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value to 7 and 2 by trial and error and by showing that 7 and 2 are associates of 
squares. 

EXERCISE 11. Show 10 = (VlO)^ =2-5 leads to nonunique factorization. 
Hint. Show the unsolvability of — \0y^ = ±2, ±5. 

*7. Euclidean Algorithm 

The basis of unique factorization in rational number theory is the 
Euclidean algorithm, which we now reformulate for an integral domain D„. 
An integral domain is Euclidean if given any two elements a and /S 

0) of ; an element y of can be used as “quotient” so that the 
“remainder” on dividing is of smaller norm than Symbolically, 

( 1 ) \N(oi - m < \mi 

THEOREM 6. lfO« is Euclidean, then any element ofO„ can be expressed 
uniquely as a finite product of indecomposable elements, ignoring units and 
the order of the factors. 

Proof. We first factor any element of into indecomposables (by 
Theorem 2, §3 above). We then show that the indecomposables are primes 
(by Lemma 1 1 below), so that Theorem 1 applies. Here the proof goes in 
stages that the reader can easily recognize by recalling elementary number 
theory. 

LEMMA 10. Ifa and ^ are two elements of a Euc/zdeon/ntegro/domo/n, 
then they have a greatest common divisor, gcd (a, p) = y in the sense that 
any p which divides a and ^ divides y, and conversely. We can write 

(2) y = a| + ^rj, 
where f and rj belong to 

Proof Consider the set of elements af + = /(^, rj). Let the element 

of smallest norm (in absolute value) be 

(3) y =/do» ^o) = afo + 

Then we assert that any f{S, rj) where | and rj belong to is a multiple 
of y. Otherwise, let yi = /(^i, ^i) where yj is not a multiple of y. Clearly, 
then, by the Euclidean algorithm, for some p, |V(yi — py)\ < |iV(y)| and 
thus 0 ^ yi — py = /(f^ — pfo, rji — prjo) has smaller (absolute) norm 
than y, contradicting the definition of y. 

It therefore follows that y satisfies the property of the theorem for 
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y I a = /(I, 0), 7 I /? = /(O, 1) whereas any p that divides a and 
necessarily divides y = [(a/p)^o + (^lp)Vo]p^ Q.E.D. 

LEMMA II. If 7T is an indecomposable element of and tt | ajS, then 
7T I a or 77" I 

Proof. If 77 T a, then, since tt is indecomposable, gcd(7r, a) = 1. By 
Lemma 10, we have 

(4) 1 = f 

for integers ^2 of Then /? = + ^ 2 ^^ = 

77 1 Q.E.D. 



*8. Occurrence of the Euclidean Algorithm 



If we divide (1) of §7 (above) by N0), we see that the Euclidean algorithm 
for states the following: for any fraction a/^ formed by elements of 
an integer y of exists for which 

( 1 ) INio^/p - 7)1 < 1 . 

We note that the denominator of a/jS can always be rationalized so that 
a/^ = where B = N{^). Thus the most general fraction in = 

[1, (o\ IS 

whereas y = a bw. Thus, when A 2 , B{> 0) are given integers, we 
are trying to find integers (a, h) such that 



( 3 ) 



n([^ - a 


+ CO — — 6 


) 


\Lb J 


Lb J 


/ 



COMPLEX CASE {D < 0) 

In order to cover all cases of £)„ (for n > 1), we can take for D any 
negative integer; then we can always take w — V D, while we can also take 
CO = (V D l)/2 when D = 1 (mod 4). This includes all cases of 

in Chapter III, §9. 

Either way, we take the plane with the complex integers as represented in 
Chapter IV and for each lattice point f we lay out the region consisting of 
points closer, in the ordinary Euclidean sense, to ^ than to any other lattice 
point. This region is called a zone. When co = 's/ D, the zones are simply 
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Im ^ 




FIGURE 6.1 




small rectangles, as shown in Figure 6.1. The farthest point from the 
origin in the zone around the origin has distance 



( 4 ) 

In the case in which = (1 + V D)/2 the zones are formed by taking 
the perpendicular bisectors in the parallelograms, as shown in Figure 6.2. 
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The farthest point from the origin in the zone about the origin is easily 
seen to be Qi the point of the imaginary axis equidistant from 0 and w. 
Thus 

\Qi\ = \Qi - o)\ = 

^\D\l2f + 1 

(5a) e = (I D = 1 (mod 4), D<0. 

(5b) ^Qi = (1 - D)/4VD. 

Now, since the norm of i in R(V D) is precisely the Euclidean distance 
((Re 1)^ + (Im it follows from inequality (1) that a necessary and 
sufficient condition for the existence of a Euclidean algorithm is that we be 
able to put the zone about the origin wholly inside a unit circle (so that not 
even the extremities of the zone lie on the circle). We note, for example, 
that the extreme point of the zone corresponds by (56) to a fraction in the 
field. Thus it is required that the expression (4) or (5a) be less than 1. By a 
simple exercise in inequalities we now discover: 

THEOREM 7. The only imaginary Euclidean integral domains are Ox, 
the ring of ail integers in R(V Dq) for Dq = — I, -“2, —3, —7, -“II. 

THE REAL CASE (D > 0) 

We cover the cases of 0„, as we did for the complex case, except D is no 
perfect square. But here, we have a much more difficult problem, for the 
zones are very complicated. For example, if o> = Vi), inequality (3) 
becomes 

which could be satisfied by an infinite number of integers (a, 6) for a given 
pair of fractions AJB and AJB. We therefore have trouble in saying (6a) 
is impossible, although we can check that it is possible “often enough” to 
establish the Euclidean algorithm in many cases. 

THEOREM 8. The sets ofDiOf all integers in R(V2), R(V2) are Euclidean. 
Proof. Let A JB, A ^jB be given ; then we need only choose a and 6 as the 
closest integers to these fractions : 

(7) \AilB — a\ lAJB — 6| < thus, with D = 2,5, 

(8) -D/4 < (A^IB - af - D(AJB - by < 1/4. 





Q.E.D. 
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In a few cases we can show the nonexistence of the Euclidean algorithm 
directly: for instance, for D 2 in i?(V5); then the integers of D 2 are of the 
form a + Z)V5. If we let <y.jB = (1 + V5)/2, we see that for any 7 in O 2 , 
\N{a.jB — y)\ > \ by virtue of the fact that a/5 happens to be an integer in 
Di, and the norm is therefore a rational integer. Hence the Euclidean 
algorithm is seen to be inoperative for that particular value of oLjB. 

It happens to be true (although we omit proof) that for R{V6) has 
the Euclidean algorithm, To illustrate one case, take a = 1 + Vb, 5 = 2. 
We wish to choose 7 = a + 6 a /6 so that in accordance with ( 1 ) and {6a) 

{6b) - af - 6{i - b)^\ < 1. 



Now if we looked for {a, b) “close to” (i, J) we would hardly think of 
choosing a = 2, b ~ 0, which actually satisfies {6b). Yet, we could have 
even chosen a + bV6 == 14 + bVb, which looks much farther away in the 
lattice Figure 4.1 in the Euclidean sense but not in the sense of the norm 
( 6 a). _ 

We next consider cases in which co = (1 -f V 5)/2 and D = 1 (mod 4), 
hence D > 5; and we write a/5 = AJB + (oAJB. We search for the 
integer y = a + boj satisfying (1). Now 



(9) N 





Thus, if we take a and b as the closest integers to A JB and AJB, we find 
we are dealing with new variables 

(10) P = AjB-a, Q = AJB-b, 
which satisfy 

( 11 ) -i<P<h 



LEMMA 12. Consider the function 

(12) f (P. Q) - + pQ _ 

where s is a real constant > I and P and Q are restricted by condition (I I). 
Then 

(13) max lf(P, Q)| = |f(-i +|)| = (4s + I)/I6. 

Proof. The maximum of |/(5, 01 is achieved on the boundary of the 
square defined by condition (1 1) because of the homogeniety. Thus, since 
f{tP, tQ) = t^f{Py 0, the larger |t| becomes, the larger |/| becomes. For 
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the boundary we use the symmetry involved in the condition f(P, Q) — 
/(— P, —0; hence we can consider f(P, and /(^, 0, for < P < | 
and — i < 2 < 4. We can differentiate and we find 

dmi)idp = o at (P, 0 = (-i, +i), 
3/(i2)/ae-0 at (P, 0 = (i 1/(4^)). 

Then comparing with “endpoints”, |/(— J, i)\ = (4^ + l)/16,/(i, 1/(45)) 
= (45 + 1)/(165), l/(^i i)l = 5/4, and l/(i J)1 = 1(2 ^ 5)/41, we see the 
maximum is as indicated in (13). Q.E.D. 

THEOREM 9. The set of all Integers Dj in R{VS) or R{V 13) are Euclidean. 
Proof. We just verify that with 5 = (/) — l)/4 these values of D make 
(45 -f 1)/16 < 1 and are = 1 (mod 4); thus Lemma 12 applies. Q.E.D. 

The Euclidean algorithm is, however, not excluded when D > 16, for 
the “closest” (a, b) to (AJB, AJB) need not be the ones given by (10) and 
(11) for Lemma 12. 

It has been proved that the Euclidean algorithm is valid for a variety of 
cases including the integral domain of all integers (SDi) of the fields of 
R(VDo) for» 

Do = 2, 3, 5, 6, 1, 1 1, 13, 17, 19, 21, 29, 33, 37, 41, 57, 73. 

Recently Davenport (1946) proved that these are the only such fields. 

There are unique factorization fields that are not Euclidean in the real 
and in the complex case. The first is == 14 and Dq — —19. Further 
information can be found in Table 3 in the appendix. 

EXERCISE 12. Verify that in P(V —5) is not Euclidean directly by taking 
a ratio a/P of two numbers of type a + 6 V — 5 and showing no suitable y exists 
for (1). 

EXERCISE 13. Do the same for O2 in P( V— 3) (where the integers are a + 
bV^). 

EXERCISE 14. For which complex non-Euclidean integral domains £)„ will 
the crucial a/P [for which no y satisfies equation (1)] necessarily be the extremities 
of a zone ? 

EXERCISE 15. Verify that - 65^ = - 65Mf P + pV6 = (r + sV6){5 -h 

2V6)”. From this find an additional value of (a, b) for which (6b) holds that is 
further from (0, 0) than (14, 6) when Z) = 6. 

^ Attention is called to the fact that Dq = 97 had been incorrectly listed in the litera- 
ture for several years. (See bibliography.) 
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EXERCISE 16. Show that the equations ±\, ±2, ±3 cannot 

have solutions in which both A and B are odd by considering both sides modulo 
8 and modulo 3. From this show that with a/5 = (1 + Vl4)/2 no y exists to 
satisfy (1) and thus for 5(Vl4) is not Euclidean. 



*9. Pell’s Equation 



The study of units goes back to antiquity and precedes all other results 
in algebraic number theory. Euclid, in one way or another, knew formulas 
like 



1 = (V2 - 1)(V2 + 1) 



by properties of circles. Given a circle of unit radius, at an exterior point 
of distance a/2 from the center tangents of length 1 can be drawn. (One 
need only visualize a circumscribing square with diagonal.) The next step 
was taken by Archimedes (who worked with VS), but who, in essence, 
built up recursion formulas. For instance, let 

(1) + v„Vl = (1 + V2)", 

then 

( 2 ) = (-!)", 

as we see by taking norms. Actually, the binomial expansion was not 
present in those times but this type of formula was discovered: 

(«n + *^n'^2)(l + V2) = (m„ + 2rJ + a/2(«„ + vj - + v„+^Vl, 



( 3 ) 



w«+i = «„ + 2v, 

■«n + l = “n + 



(“l = 1^1 = !)• 



From the last two equations we learn that by substitution 



*4+1 



2i^^+i 



-(uj - 2vJ) 



directly, without even the intervention of radicals. 

Historically, the equation 

(4) — my^ = ± 1 

attracted a great deal of interest. Eventually Euler named it after Pell 
(a seventeenth century mathematician). There is a straightforward compu- 
tational procedure for determining all solutions by continued fractions, 
which we do not consider here. The important feature for us to recognize, 
assuming m > 0 but not a perfect square, is that all such solutions come 
from units in Di the integral domain associated with R{V m). 
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EXERCISE 17. Write out a general rule for determining exactly to which 
integral domains the unit x m belongs if x and y satisfy (4). 
EXERCISE 18. Find the general solution of the six equations 
- 20t/2 = 4, -4, ±4, 1, -1, ±1 

in terms of powers of som^ fundamental unit. Hint. Start with (1 + V 5)/2. 
EXERCISE 19. Show that if ?? = D)j2 is a unit of norm ±\, if has 

the form a' + 6 ' Vd (with “no denominator”). Hint. Show if = ^ 1) F a. 

**10. Fields of Higher Degree 

Although we devote most of our attention to quadratic fields, in the 
process we would do well to note briefly to what extent the material 
becomes unified under the study of fields of arbitrary degree. In fact, the 
theory of units illustrates this unification. Indeed, the persistent dichotomy 
between indefinite and definite quadratic forms seems less severe when 
referred to fields of arbitrary degree. We shall merely make some relevant 
statements (without proof). 

A unit is, in general, an algebraic integer which divides 1 . 

THEOREM 1 0 (Dlrlchlet). Let a field R{6) be generated over the nationals 
by means of an algebraic number 0 which has r real and 2s complex con- 
jugates (so that r + 2s = n, the degree of the equation for 0). Then In the 
integral domain JO corresponding to R(0), for some definite root, the most 
general unit is given by assigning integral exponents in 

(I) ft) = (m = r + s— I). 

Here p is an imaginary root of unity of finite degree. Thus = I, whereas 
Vv ‘ ‘ ^ set of-so-called fundamental units in R(0) (which cannot 
be replaced by fewer units). In effect tQ is determined modulo g, but the 
other tj. take on all Integral values and all the units are uniquely given by 
formula (I). 

We observe the quadratic case : 

If D < 0, m = 0 (there is no fundamental unit), but when D = — 1, 
p = i and p^ = I ; when D = —3, p = J -f V~^ and p® = 1 ; other- 
wise, p — — 1 and p^ = 1. 

If D > 0, m = 1 (or there is always a fundamental unit), and p = — 1, 
(p* = 1). 

Despite superficially promising appearances, it takes much more than 
this formula to unify indefinite and definite quadratic forms. Indeed, it is 
necessary to re-examine the foundations in a manner well advanced^ 
beyond the present work. 

^ See the Concluding Survey. 
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To conclude this section, we note that the problem of finding units is in 
general extremely important and also extremely difficult. The key to 
Fermat’s last theorem, indeed, is buried in the problem of finding “cyclo- 
tomic” units in R(p) where p = exp Inilp, a primitive pth root of unity for 
p prime >5. It is seen that the field R{p) is of degree — 1, since the 
equation 

(2) f{p) = - l)/(p - 1) = p^-^ + P^-2 + • • • + P + 1 = 0 

happens to be irreducible. It is easily shown that the imaginary roots of 
unity are p^», and we further observe that r = 0, s = {p — l)/2 as all 
(/? — 1) conjugates of p are imaginary (namely exp lirkilp =: p^^ k = 
1, 2, — 1). There are many real units that one can construct, such 

as = p* + 1/p* = 2 cos iTTt Ip, Yet a complete set of fundamental 
units is generally unknown. As an example of irregular behavior, the set 
li, f 2 » ' * ‘ fs-i serve as a fundamental system for /? = 5, 7, 11, but 
not for larger p such as 17. (Compare Exercise 19, Chapter III, §10, and 
Exercise 22, below). 

EXERCISE 20. Verify that each of the following are units for the appropriate 
field: 1 + 2J^ + 2H 4 +3-3^ + 2 • 3^. Note that the conjugates are formed 
as in Chapter III, §10, Exercise 22. 

EXERCISE 21. Show that in (2), the quantities are all roots unless p \ k. 
Show that p* + 1/p* = (p* + 0(p* — /)/p* is a unit by using 

JJ(/ - a) = f{a). 
h = \ 

EXERCISE 22. Show that when p ^ \1 the roots = 2 cos Intlll, (1 < t <1) 
are not fundamental by showing — 1. 



chapter VII 

Unique factorization 
into ideals 



1. Set Theoretic Notation 

The failure of unique factorization led Dedekind (1871) to the introduc- 
tion of “ideal” factors which consist of special types of modules rather 
than individual “idealized” numbers. Before going into detail, it is 
necessary to review the basic terminology of sets now commonly accepted, 
which was introduced primarily for this purposed 
For convenience, we use module notation * • * to denote the sets 

(restricted to sets of algebraic integers with the notation a, /?, • • • for the 
elements). 

We say one set of elements SR contains another set 9^1, i.e., 

SR 3 SI or SI c SR 

if every element of SI belongs to SR. The converse relation may or may not 
hold. If SR includes SI but SI does not include SR, we write SR ^ St or 
SI c SR, and we call this strict inclusion. If SR ^ SI and SI ^ SR, we say 
SR = SI or the sets are the same. 

If an element a belongs to SR, we write 

a 6 SR or SR a a. 

Actually the e and a behave very much like the ^ and 3 and only the fear 

^ The set-theoretic concept, indeed, proved so satisfactory that Dedekind later (1872) 
introduced a set-theoretic definition of irrationals, known as the “Dedekind cut.” 
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of esoteric logical paradoxes causes us to denote “membership” by a 
different symbol than “inclusion.” 

The set consisting of a finite or infinite set of elements would be denoted 
by {a, {a, y, * * •}. Thus {a} 9Jl means precisely the same as 

a G ill. For instance, ^ ^ will mean that a e implies a g 
A ctually, the set terminology has been subsequently enlarged to become 
a calculus of propositions with symbols for implication, conjunction (and), 
disjunction (or), etc. We shall refrain from overindulgence in symbolic 
language. We shall, however, use the negations as well as 

The union of two sets ’Dt and 9^1 is the set consisting of all elements in 9[R, 
5^ or both. The union is denoted by U 3^. 

The intersection of two sets and 9^1 is the set of elements common to 
both. The intersection is denoted by 9[li n 3^. 

We define the product a2)t as the aggregate {af} where f g 9K. Thus 
a(;MR) = (a^)»t, etc. 

We define the conjugate of a set TR as the set of conjugates denoted by 
2R'. Thus (omy = 0 i'm\ etc. 

There is a vast literature on Boolean algebra dedicated to the manipula- 
tions of the symbols U, n, 3, g, ^, =, g, a, and negations. We 
shall carry this out only for a special type of module where the operations 
are quite rewarding in their consequences. 

EXERCISE 1. Show that the intersection of two modules is also a module as 
well as the product of a module by an algebraic integer using the set-theoretic 
notation whenever possible. 

2. Definition of Ideals 

We start with 0„, a quadratic integral domain. We define an ideal a 
in (denoted by lower-case gothic letters) as a module in with the 
special property that if f g then fa e a. In symbols, if 

(1) a, ^ G a, f G 
then, 

(2) OL ± p e a (property valid for modules), 

(3) af G 0 (property distinguishing ideals). 

There are two ways to look at ideals. One way is to regard the ideal as a 
module with a definite module basis and to treat each element in terms of 
coordinates. The other is to define ideals set theoretically by (1 to 3) with 
greater freedom from details of notation. 

In favor of the second method it must be noted that even at the start the 
definition (1 to 3) would prove burdensome if it had to be related to the 
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module basis a = [ayb ccoj, where cu^ is defined in Chapter IV, §10. 
Specifically, with 

a = ao; + (6 + cco^)y, 
f = r + so)^, af = Z + y, 

we would have to write : For all integers r, s, x, y there exist integers X, Y 
such that 

(4) (r + soy^[ax + (b -\- cojjy] = aX + (b ccoj Y. 

Yet the value of the module concept is not wholly computational. For 
example, an ideal, regarded as a module, contains rational integers such 
as y, the index of the module. (See Chapter IV, Exercise 7.) Actually, 
the module basis approach is required for calculations with quadratic 
forms but not for factorization calculations, as we shall see later on. 

The reader might verify that the definition can be concisely expressed 
analogously to (4) as follows : 

(5) If a, G a and ?] e O,,, then (x| + e a. 



We consider the set formed by the conjugates of the elements of an ideal 
a in jO^. They are seen (in Exercise 3, below) to form an ideal in called 
the conjugate ideal and denoted by a', like conjugate elements. 

The ideal has the motivating property that a congruence is a more useful 
concept than for a module, For example, if ^ is a module then a 
congruence can be subjected only to module operations: 

If 



a = jg (mod 2R), a, ^ G 

and 

y '= d (mod 5R), y, ^ G 

then 



OL ± y = p ± d (mod 



For an ideal a, however, we also have the multiplication : 
If 

OL ^ p (mod a), ol, p e 

then 

COOL = cop (mod a), for any co e 



Thus (with = 0) we see that “members of an ideal” serves as a generali- 
zation of “multiples of an integer” from rational to algebraic numbers, 

EXERCISE 2. Verify in detail the equivalence of (1 to 3) and (5). Show that 
the set for I G forms an ideal. Show that the intersection of two ideals 
forms an ideal. 
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EXERCISE 3. Show that the set of conjugates of elements of an ideal form an 
ideal. 

EXERCISE 4. If an ideal in contains two relatively prime rational integers, 
it consists of 

3. Principal Ideals 

Starting with a, a fixed element of we define the principal ideal in Dn 

(1) a = (a) 
as the set of af where f e 

THEOREM I. The ideal equality 

(«) = m 

is valid if and only if a/j^ is a unit or a = = 0. 

Proof, The proof is simple since (a) a /5 ; hence 

(2) = af for some | G 0„; 
likewise (/5) a a ; hence 

(3) ca = ^7] for some rj e whence, unless a = ^ = 0, 

the substitution of (2) into (3) gives ^rj = 1. Q.E.D. 

Otherwise expressed, the principal ideals generated by elements of an 
integral domain identify all associates of a given element with one another. 

An integral domain in which all ideals are principal is called a principal 
ideal integral domain, 

THEOREM 2. An integral domain with the Euclidean algorithm is a 
principal ideal integral domain. 

Proof We simply note that for any ideal a, we can define a as the 
element of a with minimal positive norm. By the argument in Chapter VI, 
§10, a = (a). Q.E.D. 

Thus for the fields listed in Chapter VI §8 Di has ideal factorization 
corresponding exactly to the ordinary factorizations. We shall see later 
that ideal factorizations are unique; hence we have another proof that 
ordinary factorizations into indecomposables^ are unique when the 
Euclidean algorithm holds. 

^ In some elementary texts ideals are defined in the integral domain of rational integers 
for this purpose. For simplicity, we consider only ideals in £)„ ; thus (w) means mOn. 
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As special cases = (1) — (rj), where rj is any unit of This is often 
called the unit ideal. Also the ideal (0) contains only 0, common to all 
ideals. Then (0) Q a ^ (1) for any ideal. The zero ideal is excluded from 
all consideration to simplify the discussion of factorization. 

As a matter of practice, the symbols a and (a) might be confused and it 
may be necessary to distinguish the ideal ((7 — a/3)^(7 — V3)) from the 
product (7 + V3)\l — V3) by the use of additional parentheses (when 
the product is inconvenient to “write out”). 

As a further convenience, we shall speak of “ideal” rather than “ideal in 
when the context is clear. 

4. Sum of Ideals, Basis 

We define the sum of ideals as the set 

(1) a + h = {a + /^} where a 6 a, P eh. 

We must note first that the sum of two ideals is an ideal. To see this we use 
the definition (5) of §2 directly: let and ag + p^ be formed with 

a,- e a, pi eh; then (for the definition) form the quantity 

p = ^(ai + P^) + rj(<X 2 + ^ 2 ) where t.rje 
But now p = ag + p^, where 

fag = fa^ -h rj(x .2 e a, 

{Ps = ^Pi + ^ 

Thus p e a + b. 

It is trivial to verify 



(2) 


0 + 6 = b + a, 


(Commutative law) 


(3) 


a + (b + c) = (a + b) + c. 


(Associative law) 


(4) 


0 + b 2 a. 




We next introduce the notations 





a + b = (a, b), 

or, in particular, if a = (a), b = (/5), we write 

fa + b = (a) + b = (a, P), 

^ ^ \q + b = (a) + (^) - (a, P). 

The variations of the notation for three or more addends are easily 
imagined and clearly consistent. 

Thus the ideal 

a = (ai, ag, • • • , a^) = + agD„ + • * ■ + 
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consists of the aggregate 



+ * ‘ * + Si ^ 

We say that the algebraic integers ai, ag, * * * , form an ideal basis 

for a. This should not be confused with the module basis in Chapter IV, 
since are algebraic (and not necessarily rational) integers, nor does the 
set of need to be “minimal” (in the sense of unique representation of 
ideal elements through the 

We should compare the notation in rational number theory, {a^ b) ^ g 
for g the gcd of a and b. It is consistent with the present ideal basis nota- 
tion in that the basis {a, b, ol, • — , A), representing an ideal a in can 
be replaced by (^, a, • • • , A). To see this result, consider the relations: 
aOn + bDn B gy and gO^ s a and b, hence aD^ + In 

particular if ^ = 1, then a = (1), 

THEOREM 3. Every Ideal in a quadratic integral domain has a finite 
basis. 

Proof. Select any element aj e a, a given ideal. Then, if a = (a^), the 
theorem is proved. If a (a^), select an ag g 0 , ag ^ (aj). 

If a = (ai, ag), the theorem is proved, otherwise let ag 6 a, ag ^ (a^, ag), 
etc. 

We achieve what is called an ascending chain of ideals : 

(6) (a^) ^ (a^, ag) ^ (a^, ag, ag) ^ ^ a. 

No two consecutive elements of the chain are equal, since, generally, 
^ (ai, ag, • • * , a„_i). We need only show the so-called ascending chain 
condition, namely, every ascending chain of ideals under inclusion is finite; 
hence at some point a = (a^, ag, • • • , a^). In our context the condition is 
satisfied very cheaply by recalling that ideals are a special kind of module. 

THEOREM 4. If 2R is a given module in there is only a finite number 
of modules X between ^ and 

9M c: X c O,. 

Proof The index [OJX] < index since in two elements 

a, ^ where a ^ ^ (mod X) satisfy ol^ ^ (mod W). The index fixes the 
value ac in the canonical basis, thereby restricting a, b, and c. Specifically, 

X = [a, b CO)] 0 < b < a, 0 < c. 



whence only a finite number of X is possible. 



Q.E.D. 
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COROLLARY. There Is only a finite number of modules with a fixed 
bound on the index. 

To relate the ideal basis with the more general module basis, we note 
the following: 

THEOREM 5. If the module [a, forms an Ideal, then [a, /9] = (a, /9), 
so that the module basis serves as an ideal basis. 

Proof : We first note trivially that (a, P) 3 [a, whether or not [a, 
is an ideal ; but if [a, /?] is an ideal, from the fact that [a, 3 a and [a, ^ 

it necessarily follows that [a, ^ (a) + (^) = (a, ^). Q.E.D. 

EXERCISE 5. Show that the module [1 + v"2, 1 — ^2] is no ideal by {a) 
working directly from the definition of an ideal and by {b) showing that this 
module represents only those rational integers that are even^ whereas the ideal 
(1 + V2, 1 - V2) is (1). 

EXERCISE 6. Show that the elements of the ideals (a^, ag, • • • , a^) and 
(aj', ag', * * • , are conjugates. 

5. Rules for Transforming the Ideal Basis 

It is easily seen that the number of elements in the ideal basis cannot be 
determined from the single fact that a quadratic module has two elements 
in the module basis. The greater flexibility of the ideal basis is emphasized 
by these simpler rules of transformation : 

(a) The elements of an ideal basis may be rearranged. 

(b) Repeated elements can be omitted. 

(c) Any ideal element can be inserted in the basis as an additional 
element. 

(d) Any basis element can be omitted if it is a member of the ideal 
determined by the other basis elements, 

(e) In particular, a zero basis element can be omitted, 

(f) A basis element can be replaced by its product with a unit. 

We can verify that each law follows from definition in a manner very 
much like that of module theory (Chapter IV, §9). Rules (a), (c), and (d) 
easily are a minimal set of rules. 

Indeed we can always reduce a quadratic ideal to two-element form by 
using basis operations for an ideal, since they include (among others) 
basis operations for a module. Yet it will not always be clear (as in the case 
of modules) when two ideal bases determine equal ideals unless each ideal is 
written as a module and reduced to canonical form by the method of 
Chapter IV, §9. For example, if = [1, coj, then for any ideal: 
(«, p,---) = 4 /}£)„ 4- ■ ■ • = [a, occo„, /3, /3w„, • • • ]. 
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Yet, as the examples below will show, the ideal basis is generally more 
flexible than the module basis and is preferred for factorization problems. 

EXERCISE 7. Let = [1, V3]. Verify step by step from the above 

laws: 

Statement. (33, 7 — 3^3) = (4 + 3^3). 

Proof. _ (33, 7 - 3 V3) = (33^ 7-3^3, (7 - 3V3)(7 + 3 V3^) = (33, 
7 - 3V3, 22) = (33, 22, 7 - 3V3, 11) = (7 - 3V3, 11) = (4 + 3V3, 11) = 
((4 + 3V3), (4 + 3V3)(4 - 3V3)) = (4 + 3V3). 

EXERCISES. Verify (13, 7 + SV3)_= (4 + Vj). Hint. Solve (7 + 5V3)(x + 
y V 3) = 2 + V3, and verify 4 4* V3|7 + 5V3. 

EXERCISE 9. Verify (I + V3) = (1 - V3). 

EXERCISE 10. Verify (4 H- VJ) (4 - VJ). Hint. Show (4 + V3,4 - v^3) 

= ( 1 ). 



6. Product of Ideals, the Critical Theorem, Cancellation 

We next define the product ab of two ideals a and b as the ideal c 
“generated by all products” a/^ where a e a, /S g b, or, more precisely, the 
aggregate of finite linear combinations p : 

(0 

U*>ea, /5^^>Gb, 

It is clear that the set {p} forms an ideal from the very definition of ideal. 
This definition of product is in no way dependent on any basis. We can 
write {p] = ab. 

For convenience, we note that if 

a = (ai, • • • , a,) 
h ” * * ■ j ^t) 

are bases then 

ab = oc 2 ^i, • • • , a^/5^). 

If we call the right-hand ideal c, we find, easily, ab 5 c. On the other hand, 
any J where 4'^ Thus any p of (1) 

satisfies 






or ab c c, and ab = c. 



Q.E.D. 
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As a special case, (a)(^) = (a/3), and the product of principal ideals is 
principal. The reader should show carefully (Exercise 11, below) that 

( 2 ) aa = (a)a. 

The parentheses on a could be omitted if desired, but we often leave the 
parentheses for emphasis. In particular, (1) a = a. 

The existence of a quotient is more difficult to establish, and we shall 
first make some easier remarks. 

LEMMA I . If every element a of a is divisible by a fixed nonzero element 
y in then an ideal b exists such that b = the set {oc/y} and a = (y)b. 



LEMMA 2. If ya = yb and y 0, then a = b. 

It is further verified by proofs that we leave to the reader: 



( 3 ) 


ab = ab. 


(Commutative law) 


( 4 ) 


a(bc) = (ab)c, 


(Associative law) 


( 5 ) 


a(b -h c) = ab 4- ac. (Distributive law) 



We now say ideal a divides ideal c in (or a | c) if and only if an ideal 
b exists in for which c = ab. Symbolically, we can write b = c/a. 

From (1), if p e ab, then pea. Thus ab £ a, or every divisor of an ideal 
contains the ideal. This is like stating, in rational number theory, that all 
multiples of 6 are even (are contained among the multiples of 2 ) because 
2 | 6 . 

Analogously with Chapter VI, §2, we extend the definitions of indecom- 
posable element in and prime element in O,,. 

An indecomposable ideal in is an ideal q in £)„ other than the (unit) 
ideal £)„, which has no ideal in as divisor other than q and 

A prime ideal in £)„ is an ideal p in other than the (unit) ideal 
with the property that for any two ideals in a and b, if p | ob, then p | a, 
or p I b. 

Analogues of Lemma 3 and Theorems 1 and 2 of Chapter VI, §§2 and 3 
hold (see Exercise 13 below). The situation is further simplified by the fact 
that under broad circumstances the indecomposable ideals become precisely 
the prime ideals. The following two theorems are critical: 

THEOREM 6. If a is an ideal (not zero) in Oi, the set of all integers of a 
quadratic field, then an ideal a* and a ( 7 ^ 0) in exist such that 

aa* = (a). 
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THEOREM 7. If a is an Ideal (not zero) in the integral domain and if 
a contains at least one element y for which N(y) and n are relatively prime, 
then an ideal a* and an oc ^ 0 in exist such that 

oa* = (a). 

We shall assume these results for the present because of their critical 
nature, and from them we shall prove unique factorization of ideals. For 
ease of treatment (in §§7to 10 below) we restrict ourselves toOj, (w = 1), so 
that only Theorem 6 is relevant. 

An easy consequence of Theorem 6 is cancellation. 

THEOREM 8. If ah = ac. then b = c (If a 0). 

Proof, Multiply by a*. Then aa*b = aa*c; (a)b = (a)c. Lemma 2 
gives the cancellation of ol, Q.E.D. 

EXERCISE 11. Prove (2) above. 

EXERCISE 12. Prove Lemmas 1 and 2 and the distributive law (5) above. 
EXERCISE 13. State and prove the analogues of Lemma 3 and Theorem 1 of 
Chapter VI, §2. 

EXERCISE 14. Show that a module basis for the product of ideals 0 and b can 
be formed as follows: If a = [a^, * * , aj and b = ■ • • , then ob = 

• • • , ■ • ’ , Show Qb = a^b + • • * H- a^b (and point out 

where ideal properties are needed). 

EXERCISE 15. In O 2 for R(V^) show that if a =(2,1 + VT3)theno ^(2), 
whereas = 2a (which contradicts cancellation). Obtain another such contra- 
diction in for n >2 by using a = («, nV £> q) ^ (n), 

7.1 “To Contain Is to Divide” 

THEOREM 9. If a | c (i.e., If a b exists such that c == ab), then a 2 c. 
Conversely, if a 2 c, then a | c (i.e., a b exists such that c = ab). 

Proof. The first part has been established. For the second part note 
that if a c then aa* ca* (using the terminology of Theorem 6) and 
(a) 2 ca* ; it follows that every element of ca* is divisible by a. Thus 
ca* = (a)b, by Lemma 1. Then 

CO* = (a)b, 
ca*a = (oc)ab, 
c(a) = (a)ab, 

and by Lemma 2 

c = ab. 

^ For simplicity in §7-10 the ideals are restricted to ideals of an Oj type integral 
domain. 
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The last step consisted of dividing all elements of ca and aob by a in 
obvious fashion. Q.E.D. 

Hence the greatest common divisor of a and b becomes the smallest 
containing ideal, or a + b by Exercise 16 (below). Theorem 4 can be 
rewritten as follows : 

There is only a finite number of ideals dividing (or containing) a given ideal. 

We say two ideals a, b are relatively prime if there exists no ideal c ^ (1) 
which divides (or contains) a and b. 

THEOREM 10. If two ideals a and b are relatively prime, then a + b = 

(a. b) = (1). 

Proof, Suppose a + b = c # (1). Then c ^ a, c 2 b; hence c | a and 
c I b, giving a contradiction. Q.E.D. 

COROLLARY. If two ideals a, b are relatively prime, there exist 
elements a e a and e b for which 

a + i3= I. 

Proof a + b contains the element 1. Q.E.D. 

This corollary can be regarded as a subtle version of the rational gcd 
algorithm: if there exists no t (except di 1) which divides both the rational 
integers a and b, then we can solve ax by ^ 1 . 

8. Unique Factorization 

Unique factorization has two familiar steps: first we factor into 
indecomposables and then we show that the indecomposables are prime. 
Note that an ideal a in Dj which is not the zero ideal can have only a finite 
number of ideal divisors by Theorem 4, §4. Thus by continued decomposi- 
tion of the ideal a into factors and by the decomposition of these factors in 
turn, we find the following: 

THEOREM 1 1. Any nonzero ideal in can be expressed as the product 
of a finite number of Indecomposable ideals. 

THEOREM 12, All indecomposable ideals in Oi are prime Ideals. 

Proof, Let q denote an indecomposable ideal, then show that if q | ab 
and q f a then q | b. If q f a, then (a, q) = (1), or an a e a, tt g q exist such 
that 



a “|- 7T = 1. 
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Then, if /5 is any element of b, 

a/S + tt/9 = ; 

but if q I ab, q 2 ab, q 9 a/?, q 9 tt, q g then q 9 a/? + and 

/S G q for all ^ eh. Thus q ^ b. Hence, necessarily, q | h. Q.E.D, 

THEOREM 13. Unique factorization. Any nonzero ideal a In has a 
unique decomposition into prime ideals. 

We proceed as in elementary number theory (see Exercise 13 above). 
If all ideals are principal, the set of nonzero algebraic integers has unique 
factorization into prime algebraic integers if we identify associates and 
ignore the order of the factors. It is not immediate that the occurrence of 
nonprincipal ideals does indeed ruin the unique factorization into indecom- 
posable algebraic integers, but we shall see this later on. The nature of 
prime ideals is also discussed in §10 below. 

9. Sum and Product of Factored Ideals 

We now know that any arbitrary nonzero ideal a can be factored 
uniquely, 

a == • * • P/S > 0, 

where the prime ideals are written p^, P 2 , ‘ , P^ If we consider another 

nonzero ideal b, for convenience we can consider p^, • • • p^ to include all 
prime ideal factors of a and b : 

■ • • pA fi ^ 0, 

although some and /; may be zero. 

THEOREM 14. ab = • • p^<+-^«. 

THEOREM 15. a + b = pr'Pa”'^- • • p,“‘. 

mi = min (e^. Q. 

THEOREM 16. a n b = Pi"'Pa"»- • • p A 
Mi = max (e^. Q. 

THEOREM 17. (a + b)(a o b) = ab. 

Proof. Theorem 14 is a result of unique factorization. For Theorem 15 
let c = Pi”'*P 2 ”'* • • • p/"', where m^ is the smaller of e^,f (or the common 
value if they are equal). Then a = ca*, b = cb*, and a* and b* are 



[Sec. 10] TWO-ELEMENT BASIS, PRIME IDEALS 125 

divisible only by primes p^; but, if p^ | a*, then p* f b*, and vice versa. 
Thus a* + b* = (1) and 

a + b = ca* -h cb* = c(a* + b*) = c. 

For Theorem 16 note that if a 3 a, b 3 a then a | (a), b | (a) and conversely. 
This is equivalent to q | a, where 

q = • • • P 

or “a 3 a, b 3 a” is equivalent to “q 3 a,” which means a O b = q. 
Theorem 17 will be recognized as the analogue^ of “gcd (a, b) • Icm (a, b) = 
ab^^' and is proved from + A = w, + Q.E.D. 

A remarkable fact is that these theorems, true for ideals^ are not all true 
for integers, even in a principal ideal domain. Trivially, if a = 2^ • (odd 
number) and b ^ 2^ * (odd number), a -j- ^ is not necessarily 2^ • (odd 
number). For instance, if a = 6, Z? = — 14, a + = —2^. Yet in ideal 

theory all is simpler: 

2(3) -h 2(-7) = (6) + (-14), (6, -14) = (2) = 2(1). 

Theorem 15 also holds for any number of addends. If we define 
ord^a = e, (the “order of p in a’’) as the integer ^ ^ 0 for which p® || a 
(or p® I a, f a), we have the following by induction on the number of 
addends. 



THEOREM 18. If Uj, are divisible only by p^, p^ and no other 

prime ideals, then 



Cl + * • * 4* Us 



i 



rip”‘. 



where 



= min ord^ a^, 
1 ^ J ^ s. 



EXERCISE 16, Show that a u b is not always an ideal but the smallest ideal 
containing it is a + b by setting up the prime factors of each. 

EXERCISE 17. Show that for any o and any b ( (1)) there exists an a such that 

a e a but a ^ ab. Hint, ab ^ a. 

EXERCISE 18. Show that if a | c and b ] c and (a, b) = (1), then ab ) c. Give 
two proofs: («) using unique factorization and (b) using Theorem 17 directly. 



10. Two-Element Basis, Prime Ideals 

We now wish to consider bases and prime ideals further. 

THEOREM 19. If a ^ b and neither ideal is zero, then an element a of 
a exists such that a = (b. a). 

^ Here “1cm” means “least common multiple” (and we assume a > 0, b > 0 for 
simplicity). 
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Proof. Let 

0 = Pi‘‘P2''* • • • P/‘> ^ 0. 

b = P/*P2^“ • • • P/‘. fi ^ 0. 

using all which divide a or b. Now since a ^ b, it follows that a | b 
and/^ > 

We write 



Oi = • ■ 


• P(‘ + ^ 


02 = Pl' + V2'“ • ■ 




Oil = • 


• • P/‘- 



Let ai be so chosen that e 0 i but ^ OiPi. Then 

(ai) = OiQi, Pi 'f pi, 

and likewise there exist e such that 

(ag) = (iiC|2» p2 f P2» 

(aj = P^fq<. 

Now, by Theorem 18, 

i = (oci) + (as) + • • • + (a,) = p/ip2^^ * • • p/‘q, 



where p, f q for any i. Thus, if we call 



a = ai + ag + • * • + e j, 

then i I (a) or (a) = p/^P 2 ^^ * * ' where and w for any i. 

Actually, each = e^. For example, if > Cj, then by writing 

— ai = ag + • • • -f — a 

we find p 5^+‘^ |ag, • • * , a^, p^^^^ |p/i| a. Thus Pi^^^ | aj although 

Pi f qi; this is a contradiction. Hence 

(a) ^ p/^Pa"^ • • • P/'HD, (Pi r w for any /). 

Finally b + (a) = a. Q.E.D. 

THEOREM 20. For any arbitrary nonzero ai e a, a given ideal, there 
exists some specially selected ag for which 

a = (ai, ag). 

Proof, a 3 (a), hence Theorem 19 applies. (Note that if a == (ai) then 
ag might equal ai.) Q.E.D. 
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THEOREM 21. For any Ideal a we can find an Integer aea such that 

(a) = ac, 

where c is relatively prime to any preassigned ideal q. 

Proof. Let b = aq in Theorem 19 and find a so that a e a (whence 
a = ac) and 

a = (aq, a). 

Using the distributive law, we see 

a = (aq, ac) = a(q, c). 

Hence (q, c) = 1. Q.E.D. 



THEOREM 22. Every prime ideal p belongs to a rational prime p deter- 
mined uniquely by p | (p). 

Proof Every ideal p contains a rational integer « ^ 0 (see §2 above), 
or p I aDi- Thus, if a = • * •/?/' by the rational unique factorization, 

then, multiplying both sides by (1), the unit ideal in Dj, we see 

(a) = * • • {p,r 

and p divides some prime (say p^ by unique factorization. In fact, it 
divides only one /?j as we easily see; for, otherwise, if p | and p | ^ (^ p^ 
for some prime q, then 

p I (/’»)> p 1 (?). 

p 2 ipi,q) = (1). 

This contradicts the definition of prime. Q.E.D. 

THEOREM 23. Every prime ideal p can be written as 

p = (p, 7 t), where N{tt) = 0 (mod p). 

Proof. Use Theorem 19 knowing p | (/?), hence pa/?. Therefore, p 
(/?, 7 t) for some tt. Now p a tt and consequently p a tttt' = N{7t). Hence 
if /? T (1) = (/), N{tt)) ^ p, leading to a contradiction. Q.E.D. 

COROLLARY. We can even select tt so that the module basis is 

p = [p, tt] == (p, tt), where p | N(t 7). 

Proof The rational integers ain p are multiples of p (lest p ^ {a, p) = 
(1)). Therefore, when we construct the module basis of p [as in Chapter 
IV, §9, (1)], the rational element is p and the other is (say) tt. But by 
Theorem 5, §4 (above), p = [/?, tt] = (/?, 77) 9 N{tt). Hence p | N{tt). 

Q.E.D. 
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The rational prime {p) has only a finite number of ideal divisors p by 
unique factorization. (See Exercise 13 above.) Actually, in some cases 
p 1 7T. Then p = (/?), and the prime ideal is the same as the rational prime 
as far as factorizations are concerned. In other cases tt | /?; then p = (tt). 

It could still happen that the various possible values tt in p = {p, tt) 
would not satisfy the condition tt | p. For instance, in /?(a/— 5) in Chapter 
VI, §6, if/? = 3, there is no tt = a + bV —5 for which tt | 3 (as we saw). 
Thus a prime divisor of 3, namely p, is merely nonprincipal, e.g., p = 
(3, 1 + 2a/ —5). It will be seen that 3 = pp' where p' = (3, 1 — 2V — 5) 
by very general results in Chapter VIII. 

The integral domain O is a principal ideal domain if and only if all prime 
ideals are principal. This is easily seen if we use unique factorization as 
well as the fact that the product of two principal ideals is principal. The 
following is less obvious. 

THEOREM 24. The integral domain Di has unique factorization into 
Indecomposables if and only if all ideals are principal. 

Proof. If all ideals are principal, then the ideal factors can be identified 
with algebraic integers by ignoring units. 

If some ideal is nonprincipal, then a prime ideal p is nonprincipal. 
Write p = (/?, 77-), where p | Niir). But then from tttt' = pq (say) it follows 
that if there is a unique decomposition there must be an indecomposable 
TTj 1/7 such that TTj 1 7T or 7Ti I tt'. In the first case (ttJ | (/?, tt). Hence, 
since p = (/?, tt) is prime, (ttj) = (/?, tt) = p. In the second case, by taking 
conjugates, tt^ | p (since p is its own conjugate) and tt^ | tt, where (tt^') = 
p, as before. Thus all prime ideals are principal from unique factorization. 

Q.E.D. 



11. The Critical Theorem and Hurwitz’s Lemma 

We are now prepared to prove the critical theorems (6 and 7) on which 
everything else depends. We start with the integral domain of all 

algebraic integers in the field R(V D), (D not a perfect square). 

hurwitz’s lemma^ 

If OL and P are two algebraic integers in and if the rational integer g 
divides aa', and the sum + /5a', then g also divides the individual 
numbers a/5' and . 

‘ This lemma is a weak form of a result applicable to fields of arbitrary degree. The 
stronger result really bears the name Hurwitz’s Lemma. 
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Proof. If I = cap', I' = ol'P, then i satisfies the quadratic equation 

5 = 0 , 

where the rational integers are defined as 

(1) A = ocfi' + (= { + 

(2) B = (= 

Now g\A,g^\B. Hence f/g satisfies 




with integral coefficients, whence ^Ig, S' I g are algebraic integers, Q.E.D. 

We are now at the stage at which Dedekind’s definition of integer 
becomes crucial. We need only observe (3). The reason that SIg belongs 
to Dj is simply that it satisfies Dedekind’s definition! For example, let 

O2 = [1, V^], a = 2, = 1 + a/3' + /3a' == 4, 

aa' = = 4 

yet 4 does not divide or ^oi' within D2. 

For instance, = (1 + V —3)/2, which is an integer under Dedekind’s 
definition (as a root ofrj^ — r)-\-\=0) but not an element of Dg. Thus 
unique factorization succeeds in = [1, (1 + V— 3)/2], although it fails 
in 02 = [1,V^] one counter example being provided by = a^. 

We can prove Theorem 6 by showing for any ideal a the ideal aa = (g) 
where a' is the conjugate ideal and ^ is a rational integer. To prove this, 
recall by Exercise 6 that we can write the conjugates 

(4) a = (ai, a2, • • • , aj, 

a' = (ai', ag', ■ • • , a/). 

Then aa' = (a^a/, a^ag', a2aj', a2a2', * * • , But we define 

C = (aja/, aiag' + aga/, agag', ’ * * , a,a/ + a^a/, a,a/). 

Now c is an ideal whose basis consists wholly of rational integers [see (1)]. 
Hence c = (^) for some rational integer g 7 ^ 0, but oa' ^ c = (g). On the 
other hand, by Hurwitz’s lemma, g divides each basis element of aa'. Thus 
(^) contains all elements of aa', and 

(g) 2 aa' 2 (g) 

or (g) = aa', proving Theorem 6. The reader should check carefully to see 
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that the theorems of §7 to §10 have not been used in the proof (which 
we deferred to the end only for emphasis). 

To prove Theorem 7, we prove the following lemma. 

LEMMA 3. If aeO„ and g and n are relatively prime and if a/g is an 
algebraic integer, (a/g g Oj), then it follows that a/g e 

Proof, The module £)„ is the set of elements a of Oi such that 

a G and a = r (mod «), (r rational). 

But if g and n are relatively prime, l/g = s (mod n) and a/g = rs (mod n) 
a rational integer, whence a/g g Q.E.D. 

We can prove Theorem 7 by choosing a basis (4) of a in which (say) 
^(aj) = ajaj' is prime to n. In the proof of Theorem 6, c = (g), where 
g and n are relatively prime. Then Hurwitz’s lemma is applicable, for |/g, 
i'lg belong to as well as to Oj. 

Thus we could develop a unique factorization theory for £)„ considering 

only a for which a 9 a, where V(a) is prime to n. Since every divisor of a 
contains a and a, the theory will carry over. A more convenient procedure, 
however, is to restrict the ideal theory to Dj, the set of all integers of 
Riy/ D), and to find the ideals of by a “projection” procedure after- 
wards, This procedure, in principle going back to Gauss’s theory of 
quadratic forms, is outlined in Chapter XIII, §2. 

For the present, we consider the ideal theory only in a quadratic integral 
domain Dj of all integers, reserving only a small portion of Chapter XIII 
for the factorization theory in 

For convenience, we speak of “ideals in R{V Z))” to mean “ideals in 
for R{y/ D)” when the context is clear. 

EXERCISE 19. A maximal ideal m in is defined as an ideal ( ^ Dn) for which 
no ideal a in satisfies m c a c On- Show that all maximal ideals are in- 
decomposable in On and state a sufficient condition for the converse. Hint. In 
O 2 for R{V~3\ (1 + V~ 3 ) c (1 + V~3, 1 - V~ 3 ) cO^. 




chapter 
Norms and ideal classes' 



1, Multiplicative Property of Norms 

The definition of index was given for modules in Chapter IV, §8, and 
naturally extends to ideals (as submodules of Dj) in which the index is 
called the norm. Thus we write for the norm of an ideal a, N[c] = index 
[Oi/a], For a = (0) we define V[(0)] = 0, but the zero ideal never really 
enters into the theory. Otherwise, the norm is always positive. Moreover, 
A^[a] = 1 exactly when a = (1), or Oj. 

THEOREM I. For any two ideals a, b 

(1) N[a] N[b] = N[ab]. 

Proof. To see this result, we count residue classes. We let ‘ » /^i 

be / = N[o] different residue classes mod a and we let -n-g, • • • , be 
m = V[b] different residue classes mod b. Then consider the Im = N[a] 
JV[b] quantities 

(2a) coi^ = Pi + I < i < /, 1 < y < w, 

where a is selected so that (a) = ac, (c, b) = (1), by Theorem 21 in 
Chapter VII, §10. 

‘ We recall the restriction to ideals in the integral domain Oi for R(Vd) in Chapters 
VIII to XIII except for Chapter XIII, §2. 
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Equation 2 a is chosen by analogy with rational arithmetic. For example, 
if r is a variable residue class modulo a, i.e., 0 < r < a, and if ^ is a variable 
residue class modulo b, i.e., 0 <q <b, then, regardless of whether (a, b) = 
1, the quantities 

(26) w = r + aq 

represent each residue classes modulo ab exactly once [for the two values 
w' = r + aq and w in (26) are congruent modulo ab exactly when r — r' 
and q = q\ We find the present proof harder only because the presence 
of nonprincipal ideals makes the selection of a become the crucial step. 
First of all, the various numbers are incongruent modulo ab. Let 
= cojj (mod ab) or 

(3) {pi + aTT,) - {Pl + !»-TTj) G ab. 

Since a | ob, 

ipi + aTT^) - {pt + CLTTj) G a, 

but, since a g a, then — pj e a; hence p^ = pj, otherwise different 
residue classes would be involved. Next we reduce (3) to 

(4) . OLTTj — OLTTj 6 Ob ; 

thus ab I (a)(7Tj- — ttj), ab | 00(77,- — ttj), and b | c(t 7,. — ttj); but, since 
(c, b) = 1 , b I (77,. — 77 j), and then tt,- — 77^ g b, whence 77, = 77^^ ; showing 
that all Im numbers are incongruent mod ab. 

We show that every f in O is congruent to some mod ab. First of all, 
I = Pi (mod a) for some i (by definition of the set p^). We write | — p, = 
a*, a* G 0, but (a, ab) = (ac, ab) = a(c, b) = a. Thus a* (e a) is com- 
posed of an element of (a) plus an element of ab. Hence, for some integer 6 

a* = a0 + where g ab. 

But 6 = 77, (mod b) for some y, i.e., 0 = 77,- -f- 77^®^ where 77^®^ g b. Finally, 
^ = p. OL* = Pi + a(77,. + 77<®>) + — Pi + 0C77,. + 2, wherc 2 = 

a77(0) -f- G ab. Q.E.D. 

We can now relate the norm to more familiar concepts by showing no 
conflict in terminology. 

THEOREM 2. If a is an algebraic or rational integer generating the 
principal ideal (a), 

N[(a)] = |N(a)| . 

Proof. First of all, if a is rational, then we shall see 

(5) N[(a)] = a^ 

To see this, note (a) = a • [1, co] = [a, ao)]. The index is therefore a^ = 
iV[(^3t)]. Next note that (a) and (a') have the same norm as ideals, since any 
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two integers of £) congruent modulo (a) have conjugates congruent 
modulo (a') and vice versa, leading to a one-to-one correspondence of 
residue classes via conjugates. By Theorem 1 and Theorem 2 for rational 
ideals, 

iV[(a)]2 = ^[(a)] Nl(^')] = iV[(a)(a')] = N[{N(c,))] = N(ccf. 

Since A^[a] > 0, necessarily, Theorem 2 follows. 

We can further identify A^[a] by referring to the critical theorem in 
Chapter VII, §11; aa = (g). Here, by taking norms we find N[aa] = 
iV[a] V[a'] = V[a]^ = g^; hence N[a] = |g|. Thus 

(6) aa' = (Nla]). 

Note that since a 2 aa' = (g) the ideal of rational integers in a is a 
divisor of the ideal (V[a]) (which it contains). 

THEOREM 3. If the ideal a is not divisible by any rational integral Ideal 
In O except (I), then the rational integers in a are all the multiples of N[a]. 

Proof, Since a divides {N[a]) by (6), then a contains V[a]. Let the 
rational integers in a be given by the ideal (g) so that V[a] = gk. We show 
k = 1 and V[a] = g as follows : 

aa' = {gkf 

and, since a 2 (g), a | (g) or ah = (g) for an ideal h. Thus 

aa' = ahk, 
a' = hk, 
a = h'k, 

by taking conjugates; k | a and — 1. Q.E.D. 

In particular, if we factor a rational prime (/?) = flp/s taking norms 
we find • * * . Thus MpJ is a power of p. This leads 

to several cases, namely 

MpJ = /’^ = 1 ; Af[pi] = = p, ei = ^2 = 1 ; 

^[Pil = /> Cl = 2. 

THEOREM 4. The quadratic-prime Ideals p are related to integers in 
the rational field in the following possible ways: 

(p) = (p), or (p) “does not factor”, N[(p)] = p^; 

(p) = pjPg, or (p) “splits” Into two different factors, 

N[Pi] = N[pJ = p; 

(P) = Pi^» (P) "ramifies”, N[pJ = p. 

Thus the norms provide the measure of the “size” of the ideal as a factor. 
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EXERCISE 1 . Let a be in Dj and « > 1 ; show, if ( V[a], n) = \, that a contains 
an element a for which (V[a], «) = 1. Is a converse valid? 

EXERCISE 2 (Chinese Remainder Theorem). Let pi (1 <i< V[a]) and 
(1 <y < V[b]) represent the residue classes moduli a and b, respectively, and let 
(a, b) — (1). Show that the residue classes modulo ab are determined by the 
pairs of residue classes (p*, in one-to-one manner. Hint. Use Exercise 18 of 
Chapter VII, §9. 

EXERCISE 3. Consider the ideal (a, 6 — coq) = cl, where coq is defined as usual 
(Chapter III, §7). Then, if ^ = gcd (a, N(b - cop)), show that the rational 
integers in a are exactly the rational integral multiples of Hint. Set + 
ib — = t and multiply hy b — (Oq. Show V[a] = ^ by noting that x -h 

yo)Q ^ X + yb (mod a). Verify by actually calculating aa\ 

EXERCISE 4. In Exercise 3, if a j N(b - coq), show the module ^ = [a, 6 - coj 
equals the ideal a by shorvjring ^ < a, whereas index [O/^] = index [Dja]. Verify 
^ = a by actually calculating the general term of each. 

2. Class Structure 

Once we see the failure of unique factorization of integers (without using 
ideals) we are led to measure the extent to which this “failure” prevails. 
For this purpose we say two ideals a, b (not zero) fall into the same class, 
written a b if 

(1) a(/5) = b(a) 

for integers a, ^ not zero. It is easily seen that equivalent ideals “form a 
class” in the logical sense. This means, if a ^ b, then b a and, if 
a ^ b, b ^ c, then a c and, finally, a ^ a. To see the second result, 
which is the least trivial, note that (1) and 

(2) Hr) = c(^o) 

imply together 

(3) ai^y) = c(/9oa). 

Now all principal ideals (a) ^ (1); hence, if there is but one class (the 
principal class), unique factorization prevails and conversely. The principal 
ideals are the identity class, since (a)a ^ a. There is an inverse to the 
class of a, namely the class of a* where, by Theorem 6 in Chapter VII, 
aa* = (a) (1). Note that if a ^ b and bb* = (^) ~ (1) then h* a*. 

(For if (p)a = (ff)b then (p)aa*b* = (<T)ba*b* and (pa)b* = (a^)a*). In 
the quadratic case, of course, we can let a* = a'. 

We denote an ideal class of nonzero ideals by a capital roman letter, e.g., 

(I): (l)^(a)--'(^)^* • • 

(A) : * • 

(B) : bi'-^ba'^bg^* • • . 
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We define the product of two ideal classes C = AB as the class belonging to 
any ideal c = ajbi formed by multiplying representatives of each class. 
To make the definition valid, it must be verified that with symbols defined 
as above 

Ulbi Cl2b2) 

but this is an easy consequence of definition. We need hardly add 
that commutativity and associativity, etc., follow from the ideals; e.g,, 
we denote the class of a* by if A is the class of a and aa* is 
principal. 

I AB = BA, (Commutative law) 

\ A(BC) = B(AC), (Associative law). 

The sum A + B, however, is meaningless; e.g., if Ci Qg, bi b 2 , then 
(Ui, bi) is not necessarily equivalent to (q 2 , b 2 ). For instance, let a = (a, ^) 
be nonprincipal. Then (a)a a and (^)a ^ a, but (a)a + (j^)a is not 
equivalent to a + a, for a a obviously = a, whereas (a)a + (/S)o = 
((a) + (j5))a = a • a. Hence we ask if aa a. If aa* — (a), aaa* aa*, 
a(a) ^ (a), and a (1), contrary to assumption. 

Now we shall see why the class structure provides a “measure” of the 
remoteness of unique factorization once we show that the ideal classes 
form a finite (commutative) group. 

THEOREM 5 (Minkowski). Every Ideal a contains an element a such that 

0 < |N(a)l < N[a]V17| . 

where d is the discriminant of the field. 

This theorem, which is geometric in nature, is proved in the next two 
sections. We shall draw a few conclusions now. 

COROLLARY I. Every ideal class A contains an ideal a such that 

N[a] < V\d\ • 

Proof, Let b belong to A~^ and let b contain an element ^ with the 
property that 

0 < \N(^)\ < iV[b]\/R|. 

Since jS € b, then b | (jS) and b satisfies 

(5) ba = (fi) for some a. 
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But a belongs to class A, since (5) indicates that it is inverse to the class 
of b. Hence taking norms of (5), 

A^[b] N[a] < iV[b]A/R, 

whence follows the conclusion. (The < becomes a <, when V\d\ is not 
rational.) Q.E.D. 

COROLLARY 2. The number of classes is finite. 

Proof, Only a finite number of modules can have a norm (or index) less 
than a/ \d\. (See Theorem 4, Chapter VII, §4.) This is all the more true for 
ideals (since they are a special type of module). Q.E.D. 

THEOREM 6. The ideal classes form a finite commutative group. 

Proof. The finiteness was just shown. The group properties are (4) 
together with the inverse. Q.E.D. 

COROLLARY. If h is the number of classes, then for any ideal a, is 
principal. 

This follows from Lagrange’s lemma (whereby the order of an element 
divides the order of the group). 

THEOREM 7. Every ideal class A contains an ideal a relatively prime to 
any preassigned ideal q. 

Proof Let b e A“^. Then b ^ bq. Thus we can write b = (bq, (/?)). 
Hence {^) = ba, where, by the definition of inverse class, o e A. But, since 

b = (bq, ba) = b(q, a), 

(q, a) = (1). Q.E.D. 

Thus it is never the case that all principal ideals have a common divisor 
with some fixed integer m> 1, for example. 

The preceding theorems made no use of special properties of quadratic 
fields. For an elementary result, strictly true of the quadratic case, we 
note the following in retrospect: 

THEOREM 8. In the quadratic case the conjugate of an ideal determines 
the reciprocal of its class. 

3. Minkowski’s Theorem 

The proof of Minkowski’s theorem requires a good deal of visualization. 
First of all, we consider a lattice parametrized by rational integral variables 
X and y. 

( 1 ) 




f = aa; + ^y, 
Yj = yx + by. 
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or, in vector form, 
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(2) (I, rj) = x{x, y) + (5). 

Here a, y, <3 are real numbers (rational or irrational, quadratic or 
otherwise). The lattice then consists of integral combinations of the basis 
vectors (a, y) and {P, d). In order that the basis vectors not be parallel, we 
say they form a basis parallelogram of nonzero area A, In analytic geometry 




the area determined by the vectors (a,y) and (j5, d) is given as the following 
absolute value of a determinant: 

(3) A = [a^ “ Py\ > 0. 

The parallelograms of area A cover the plane by translations (see Figure 

8 . 1 ). 

The vector closest to the origin need not be (a, P) nor (P, y) but could be 
more difficult to obtain. For instance, if (a, y) = (1, 1) and (P, = (2 ,1), 

it is clear that ±(1, 0) = qp(a, y) ± (P, and ±(0, 1) = ±2(a, y) T 
(P, are the closest possible points (since all coordinates are integers). 
We are ready to use this basic result of Minkowski. 



THEOREM 9. In the foregoing lattice notation of (I) and (2), there is at 
least one (f, rj) ^ (0, 0) (for an integral (x, y) ^ (0, 0)) which satisfies 



( 4 ) 



1^1 < Va, 
l??l < Va. 



Proof. We construct, centered about each point of the lattice, a square 
of side cV A where c is a real constant c > 1 (and, for convenience, c < 2). 
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Thus we have squares of area c^A(> A) surrounding each point of the 
lattice. The basis parallelograms of area A completely cover the plane. 
It is now intuitively clear that some of the squares must overlap, since each 
has a larger area than the parallelogram. 

To accomplish a rigorous proof, we must argue the following: 

(a) In a large circle of radius R there are (approximately^) N ^ ttR^I A 
points (or parallelograms) if we associate each basis parallelogram with the 
lower right-hand corner. 




FIGURE 8.2. When overlapping occurs, distance is <^cV A + icV A. 

(b) The area of this circle would have to exceed Nc^A itR^c^ if the 
squares failed to overlap. This is impossible if c > 1. 

Once we achieve overlapping, we can say for some two distinct lattice 
points 

(fo> no) = ^o(*. y) + 2/o(/5, ^), 

(* 0 . 2/o) (* 1 . 2/i). 

(fi. »?i) = *i(a, y) + 

that (as in Figure 8.2), 

1^0 - fil < A + IcV A, 

\Vo - Vi\ < icV A + JcVA, 

^ In calculus A B means AJB as R -► oo, not to be confused with “similar 
ideals.*’ The rigorous argument is left to the student to complete. We merely wish to 
make clear the power of geometrical “existence” proofs scarcely like the constructional 
proofs of Euclid! A more rigorous argument is given on a related matter in Chapter X, 
§ 2 . 
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Then, writing — x-^ — X,{y^ — = Y and 

(f, ri) = ^(a, y) + Y{P, S), (X, Y) ^ (0, 0), 

we find that (5) becomes 

(HKcVA, (!,»?)# (0,0), 

W<cVA. 

We have not quite achieved formula (4). We let c = = 1 + 1/w, 

where the integer w oo. For each m a solution exists for which 



< c„a/A, ^ (0, 0), 

< c„VA. 



But, since 1 < < 2, it is clear that only a finite number (say Q) of 

^(m)^ jg considered (namely, the number that lies in a square of side 
4V A centered at the origin). 

By an adaptation of Dirichlet’s boxing-in principle, if at most Q points 
are used in an infinitude of (7), as m = 1, 2, 3, 4, • • ' , at least one of these 
points (f *, Y}*) must be used in an infinite number for a special sequence of 
m. For this point 

A, 

as /w 00 through a special set of values. Regardless of how m -> oo, 
Hence (8) yields the desired result (4) on the limiting operation. 
[In retrospect, we can see (f*, ??*) was valid in (8) for all w.] Q.E.D. 

EXERCISE 5. In the lattice determined by (a, y) = (1, 0) and (jS, (5) = (/w/«, 
l/(« - 1)^) show that Theorem 9 leads to the solution oi mx + ny — \ if 
(w,/i) = 1. 

EXERCISE 6. In the lattice determined by (a, y) = (1, 0) and (i?, S) = (^ 2 lh> 
1/r^) show that Theorem 9 leads to a variant of Lemma 5 of Chapter VI, §3. 
EXERCISE 7. Show that the inequalities (4) of Theorem 9 can be replaced by 
the single inequality ||| + \rj\ < V2A by noting the area of the square determined 
thereby. 



4. Norm Estimate 

We shall actually prove the following theorem : 

THEOREM 10. Every module 9R in Dj with different A(2H) contains an 
element a for which 0 < |N(a)| < |A(9(K)|. 
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Recalling the terminology of Chapter IV, §10, A^(3JJ) = pd where 
j = [Di/9K]. If SHI is the ideal a, then j = V[a], and Theorem 5 (above) 
follows. (The different is not necessarily positive). 

To prove Theorem 10, we first separate cases according to whether d> 0 
ox d <{). 

Let d> 0. The module IR = [a^, ag] in basis form. A general element 
for rational integral x and y is 

( a = 

aG9K, 

a' = a/o: + ag y, 

where | A(9J1)| = [a^ag' — oci'agl, which is precisely the parallelogram area 
A. Thus the desired result comes from Theorem 9. Q.E.D, 

Let d <0, The ideal TH = [a^, ag] is written as before. 





j'a = + aa2/, 




(2) 


(a = a/x + agVj 


a6 9K, 


Here 






(3) 


(«! = + iyi, xi' 


= ^1- iyv 


1*2 ~ ^2 "b *y2> *2 


= ^2 - '>2: 



where yj, /Sg, yg are real. For example, if + bV d, then = a, 

b\/\d\. As before, by multiplying the determinant and taking 
absolute values, we can verify that 

|A(9Jl)| = abs = abs abs ^ |. = 2 

ag ag P 2 ^2 I — I 

Now, separating the real and imaginary parts in (2) and by substituting (3), 
we obtain components which form a lattice like that in Figure 4.2 : 

I a = /) + m, 

[X = p - ia, 

where 

ip = PiX + 

= y^x + ygy, 

and 

A* = liSiy2 - 71^21 = |A(3Jl)|/2 

is the parallelogram area. Hence, by Theorem 9, §3 (above), we determine 
a couple {x, y) or (p, a) for which 

IpI < Va*, iff| 5: 



Thus 



aa' ^ p^ + a^ < 2A* = |A(aR)|. 



Q.E.D. 
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It would be appropriate to remark that the depths of the norm estimation 
problem can be appreciated only in terms of further results which are not 
proved (or used) here. 

THEOREM II. Every ideal a contains an element a of nonzero norm 
< N[a]A/ d/5 if d is positive or < N[a]V —d/3 if d is negative. 

The extreme cases occur when d = 5 and d — —3, respectively, with 
a = (1), a = 1. Thus it is only a coincidence that in the weaker versions 
proved here the real and imaginary results seem to be the same. Geo- 
metrically, they are vastly different ! 

Minkowski’s theorem can be slightly strengthened so that (4), §3, 
becomes 

(4) m < VA, \ri\ ^ VA, 

Thus one specified inequality can be made strict. (See Exercise 9, below.) 
The “extreme” case is (a, y) = (1, 0) and d) = (0, 1). Here A = 1 and, 
when X = 0, y = 1, by (1) in §3, ^ = 0 , ?? = 1. Thus beyond the use of 
one strict inequality no improvement can be made on Theorem 9. Other 
techniques are needed for a result like Theorem 11. 

EXERCISE 8. Show that, starting with Exercise 7 and using the inequality 
4\Srj\ < (|l| +1^1)^, we can improve Theorem 5 (slightly) to attain the inequality 
0 < N(ol) < N[a]V^2 for real fields. 

EXERCISE 9. Improve Minkowski’s theorem to (4) by first solving |^| < 
Va ml(m + 1), \r)\ <VA(m -|- l)/w. 




chapter IX 



Class structure in 
quadratic fields 



1. The Residue Character Theorem 

As mentioned in Chapters VII and VIII, the prime ideals p, first of all, 
can arise only from rational primes (Chapter VII, Theorem 22) and, 
second, completely determine the class structure in that every equivalence 
class, say that of a = IIp/s is determined by the equivalence classes of 
the p^. 

As a matter of fact, in 1882, Weber showed that a prime ideal exists in 
each equivalence class, but the result is deferred until Chapter X, §12. All 
we say is that we can build the class structure by using p^ as generators. 
We therefore must know how to construct the p^. 

THEOREM I. The rational prime p factors in the quadratic field R(VD) 
according to the following rules based on d, the discriminant of the field, 
and (d/p), the Kronecker symbol: 

1 (p) = (p) or p does not factor if and only if (d/p) = — I ; 

(p) = pp' or p splits Into two different factors if and only if (d/p) = + I ; 
(p) = p2 (and p = p') or p ramifies if and only if (d/p) = 0. 

Here the rule Is independent of whether d > 0 or d < 0 or whether 
d=D = I (mod 4) or d/4 = D ^ I (mod 4) (where D is a square-free integer). 

Proof. The proof is wholly constructional, and we shall derive specific 
formulas for p and p'. 
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[Sec. 1] THE RESIDUE CHARACTER THEOREM 

We first show that if factors exist, hence (p) = pp' or p^, then (dip) = 1 
or 0. According to Theorem 23, Chapter VII, if p | /?, then for some tt, 
p = (p^ tt) and p \ N(7 t). If /? | tt, then p = /?(!, Trjp) = p and p does not 
factor. Therefore, we assume 

(2) p = {p, tt), P I p-fTT. 

First we take/» odd. Then we write 77 = a + bV Dottt = (a + bV D)I2, 
depending on whether AD — d ov D = d. In either case 

whereas p ^ b (for p\b then p j a and p ] tt). Then 

— b^D = 0 (mod p) 

and, if 5 = b~^ (mod /?), i.e., bB = 1 (mod p), 

(aB)'^ = D (mod/?); 

thus (Dip) = 1 or 0, as a result of the assumption in (2). 

Next we take /? = 2; then (dip) = — 1, just when d = D = 5 (mod 8), 
according to Kronecker’s symbol. If tt = (a + bV Z>)/2, 

2 I N(tt) = = 0 (mod 2), (a = b (mod 2)), 

4 

whereas 2 < j and 2 f Z?, lest tt be divisible* by 2. Thus we can say 
that — b^D = 0 (mod 8). This contradicts the possibility that D = 5 
(mod 8), since, for odd a and b,a^ = b^ = 1 (mod 8). Again (dip) ~ 1 or 0. 

Now all we need show is the existence of prime divisors p, p' to answer 
the requirements of the theorem when (dip) = 1 or 0. 

First let p be odd and (dip) = 0. We can actually write out 

(3) p = (/?, 7 t) tt = Vd. 

Note p' = p, since (/?, Vd) = (/?, —V D). Then p^ = (/?, tt)^ = (/?^,/?7t, 
= pip. TT, Dip). But since D is square-free, (p, Dip) = 1 ; hence 
p* = (/»)• 

Next let p be odd and (dip) = 1. There exists an a such that (since 
d = Dot d^ 2^D) 



^ D (mod p) and (a, /?)—!. 
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CLASS STRUCTURE IN QUADRATIC FIELDS [Ch. IX] 
Set 77 = a + and define the ideals (not yet known to be prime) : 

(4) p = (/7, a + V D), p' = (p,a-V D). 

Now p p'. For otherwise we could reason 

P = P' = P + P' = (/>, a + Vd, a - VZ)), 

= {p,a + \^ D,a — V D,2a) = (1), 

since p is odd and (/?, a) = 1 . This is a contradiction by virtue of our next 
step that (/?) = pp' ^ (1). Observe 

pp' = ip'^^pa + pV D,pa — /7\/ D, — D), 

= pip, a -\- V D,a — V D,{a^ — D)jp), 

= pip, la, • • •) = ipy 

Thus Theorem 4 of Chapter VIII, §1, applies and p is prime. 

We finally take care of p even. If (<i/2) = 1, = 1 (mod 8), and we 

write 2 = pp', where, again, we explicitly write out 

(5) p = (2, (I + Vd)j2), p' = (2, (1 - \/d)j2). 

Once more p ^ p', for otherwise 

p = p' = p + p' = [2, (1 + Vd)l2, (1 - Vd)l2] 

= [2, (1 + Vd)l2 + (1 - Vd)l2, • ■ • ] = (2, 1) = (1). 

This is false, since 

pp' = (4, I + Vd, I - Vd, I -d) = (4, 2, • • •) 

= 2(2, 1, • • •) = (2). 

The final case is (c//2) = 0, which means D = — 1 or 2 (mod 4). Here, 

(6) 77 = 1 + Vz) or 77- = Vz). 

with further details left as an exercise (below). Q.E.D. 

For simplicity of application, we write the factorizations concisely 
according to the value of p: 

(2) if d = D = 5 (mod 8), 

(2, (1 + Vd)I2)(2, (1 - Vd)I2) if d= D=\ (mod 8), 

(2, 1 + if d/4 = /) = - 1 (mod 4), 

(2, if d/4 = Z) = 2 (mod 4) ; 
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[Sec. 2] PRIMARY NUMBERS 
and for /? > 2, 

{p) if /? f D and = D (mod p) is 

unsolvable, 

(/?, X + V^)(/7, X — V D) ifp i D and x^ = D (mod p), 

(p, VDf ifp I D. 

Another form of Theorem 1 is the following: 

THEOREM 2. If p is any prime ideal factor of (p), then for w = V 0, If 
D ^ 1 (mod 4) or CO = (I + V D)/2 if D = I (mod 4) (D square-free), it 
follows that the equation (or equations) 

( 7 ) CO = X (mod p), p = any prime divisor of (p), 

has I 4- (d/p) roots x (mod p). 

COROLLARY. Under the conditions of the foregoing theorem, the 
equation 

N(x — co) = 0 (mod p) 
has I + (d/p) distinct roots x (mod p). 

EXERCISE 1. Verify that when (d/2) = 0 in (6), (2) = where p = (2, tt) = p'. 
EXERCISE 2. Verify Theorem 2 and corollary when p is odd. Do p ~ 2 
separately. 

EXERCISE 3 (Generalized Euler <I>-Function). Let €>[a] denote the number of 
residue classes modulo a which are relatively prime to a. Verify (a) <I>[a]0[b] = 
d>[ob] if (a, b) = (1) from Exercise 2 of Chapter VIII, §1 ; (b) if the prime p | o, 
then <t>[ap] = A[p]<l>[a] from (2a) of Chapter VIII, §1 ; and (c) <b(p) = A[p] — 1. 
Next show O[o] = A[a]II[l — 1/A[p]] with the product extended over the primes 
p I a. Finally, show for a rational prime p, <l>[(p)] = [p — (d/p)][p — 1] and 
^[(^)] = ^(a)aU[\ — (dlp)lp], where the product extends over rational p | a and 
<l>(a) is the (ordinary) Euler ^-Function. 

2. Primary Numbers 

To every principal ideal (a) there corresponds an aggregate of generating 
associates ^ where ^ = arj and rj is a. unit. These ideals are indistinguish- 
able, e.g., (a) = (/?). 

If d < 0 or the field is imaginary, then there are two units + 1 and — I, 
except whend = —3, when there are six units [±1 and(±l ± V — 3)/2],or 
when d = —4, when there are four units (±1 and ±i). In all these cases 
there is only a finite number of associates, and there is little purpose in 
distinguishing them one from another at the present stage in the theory 
(although Exercises 4 and 5 (below) are instructive in this fashion). 
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lid > 0, then a real fundamental unit exists such that N{y}^ = ±1 
and any unit rj is given by ?/ = t = 0, ±1, ±2, * • * . There is now 
an infinite number of associates, and we are faced with a more acute 
problem of identifying some standard value. 

We call the integer a of a real quadratic field primary when 

(1) 1 < |a/a'| a>0, 

for rji (>1) the fundamental unit of the field. 

THEOREM 3. Every real quadratic integer (except 0) has precisely one 
associate which is primary. 

Proof The most general associate of olq is = a. If we write 

log |a| == log |ao| + tlogrji, 

then 

log |a I = log lao'l + tlog 

But logt]^ + log \rji'\ = 0, and, therefore, letting log {olqIolqI = we have, 
by subtraction, 

log |a/a I == ^ + 2^ log =f(t). 

Now f{t) has only one value for which 

0 </(0 < 21og?yi, 

namely for t the largest integer in f/(2 log rj^). For this t we choose the ± 
sign so that ±oiQrjf > 0. Q.E.D. 

The term “primary” unfortunately tends to create confusion in view of 
the other meaning (power of a prime). The term is used because the 
uniquely chosen associate is of “primary” importance for ideal theory. 

EXERCISE 4. Show that if a is in R(V — 1) and 2 f A^(a) then there is precisely 
one of the four associates of a for which p = 1 [mod 2(1 + V — l)]. 

EXERCISE 5. Show that if a is in R( V —3) and 3 f A^(a) then there is precisely 
one of the six associates ^ of a. for which p = 1 (mod 3). 

EXERCISE 6. Show that the conditions for an algebraic integer a to be primary 
can be put into rational form by writing a = (x yV /))/2, = (a + D)/2, 

Then the condition for 1 < |a/a'| < \r)jvi\ is that x and y vanish or are positive 
and 

if A^(a) > 0, N(r}^ > 0; xjy > bDja, if A^(a) > 0, N{r}-d < 

xjy < bDja, if A^(a) < 0, N(yi) > 0; x/y < ajb, if N(<x) < 0, N(ni) < 0. 
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3. Determination of Principal Ideals with Given Norms 



We next show that the equation 

(1) N(<x) = n 

can be solved for a in a finite number of steps. 

THEOREM 4. The primary integers of norm n in a reel quadratic field 
satisfy an equation of the type 

(2) a2 - Aa + n = 0, 
where 

(3) |A| < A/l^ii (^1 + I). 

Proof, By multiplying (1) in §2 with |aa'| f= |/i|, we find 

|«| < a2 < |/i| 

V\n\ < a < V|«l * ^1- 

Thus 

|a + a'l = |a + n/a| < |a| + |«|/|a| < V\n\ rji + \n\lV\n\ 

= l«l (^1 + 1). Q.E.D. 

THEOREM 5. The integers of norm n (>0) in a complex quadratic field 
satisfy an equation of the type 

(4) — Aa + n = 0, 

(5) |A| < 2n^^. 

Proof, Here we note that ol = r si, ol = r ^ si, 

^ = a + a' = 2r < 2(r^ + s^f^ = = 2n\ Q.E.D. 



LEMMA I . If d < 0 then no number a of norm g exists in R{V D) if 

(6) g < \d\IA. 

except if g is a perfect square and a = g, a rational integer. 
Proof, Observe that the relations (with y 0) 

— Dy^ = g, D ^ 1 (mod 4), 4D = d <0, 



y < 



Dy^ 



= g^ 



D = 1 (mod 4), 



clearly contradict inequality (6). 



D = d<0, 

Q.E.D. 
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[Sec. 5] SOME IMAGINARY FIELDS 
For these numbers y we seek to determine if 

P) y 1 7i. y 1 72. • • • > r I y*. 

for then (y) \ c, or (y)q = c for same ideal q. But (2) then tells us A^[q] = 1, 
q = (1). Thus (y) = c if and only if conditions (2) and (3) hold. 

The procedure in determining class structure is clearly to factor each 
rational prime p <V^\d\ and to see how many different equivalence 
classes can be built on the resulting prime ideals p (in fact, the nonprincipal 
ones) by taking powers and products, f he class number (or the number of 
elements in the equivalence class group) will be denoted by h{d) for a field 
of discriminant d. 

We shall denote factors of {p) by the use of numerical symbols, 

( p = p '\{ p does not factor {p = p), 

P = PiPi if P splits (pi = pt, Pi = pi), 

p = p^ if p ramifies {p^ = p^). 

Thus we might write 3 = 3, 3 = 3j32, or 3 = 3^^, as the case may be. This 
eliminates the parentheses and results in fewer symbols. The notation is 
due to Hasse. With it, (a) and a are used interchangeably. 

Table III in the appendix, which shows the fantastic irregularity of h{d), 
provides much additional useful information. 

5. Some Imaginary Fields 

First take i?(V— 1). Here d = —4 and only the prime p — 2 < V|^|. 
But 2 = 1^, where 2i = (1 + V— 1). In fact (1 + V— 1) = (1 — V —1) 
since 1 + V—l and 1 — V— 1 differ by a factor of V—\. Hence all 
classes are principal, h = I, and Theorem 1 shows 

(p) = tttt' if (-4//?) = 1, 

(p) ^ tttt' if (-4//?) = -1. 

More precisely, by writing tt — x + V—\y we see, for p odd, that 

(1) p = 

if and only if (—4/p) = (— 1/;?) = I, which means that p = 1 (mod 4) 
(by an elementary result in Chapter I). This is the famous Theorem of 
Fermat in the Introductory Survey. 

More significantly, if « = then if (x, y) = 1, all odd prime 

divers of n are primes = 1 (mod 4) by the ideal factorization of x + 
V —\y into primes tt (which necessarily divide only p = I (mod 4)). 
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As a matter of practice, the number of equations (2) or (4) can be very 
large. We would do well to make a first restriction to those A for which 
— 4n is divisible by Z>, since a must belong to the field R{V D). As a 
further remark in the real case, note that since \r)i\ is smaller than any other 
(nonfundamental) unit (bigger than 1) we could not do any harm by using 
any unit rj >rj^> I instead of r]i in (3) as long as we were merely 
interested in showing that (2) and (3) have no solution. 

EXERCISE 7. Determine primary solutions, if any, of 

7V(a) = 5 in /?(V85), Vi = (9 + V^)/2, 

N(ol) = 2 in R(Vl\ = 8 + 3V7, 

A(a) = -2 in R(Vl\ = 8 + 3^7. 

EXERCISE 8. Show that if = ^ 1^2 < 0 and (gjp) = (^Jp) = ”1 then the 
divisors of p are nonprincipal. (Treat even p separately.) 

EXERCISE 9. Show that d = > 0 and {gilp) = (gjp) = “ 1 and if all 

prime factors of d are = 1 (mod 4) then the divisors of p are nonprincipal. 

4. Determination of Equivalence Classes 

The most important problem in setting up class structures^ consists of 
recognizing when two ideals a and b belong to the same class. Equivalently, 
since a' lies in the reciprocal class, when we ask if a ~ b, we are asking if 

c = a'b 1. 



Now the problem consists of taking an arbitrary ideal 

(1) C = (7i, 72. ■ ■ ■ » y,) 

in its basis form and asking if c is principal (say) = (y). The norm A[c] is 
either known from A^[a']A[b] or can be easily ascertained from the module 

c = an = y^({) + 72(1) H yjl, w] + 72 [ 1 » h — » 

where [1, co] is the basis of the field. (The determination of a canonical 
basis, hence the norm or index of a module, was covered in Chapter IV, 
§7.) We then ask, by Theorems 4 and 5 (above), which primary numbers 
(y), if any, have 

(2) |A(y)| = N[c], (the known value). 

‘ The theory of quadratic forms provides a faster algorithm for determining quadratic 
class structure (see Chapter XIII, §1), but the present methods are more easily general- 
ized to fields of higher degree. 
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6. Class Number Unity 

It was conjectured by Gauss that the only fields of class number 1 for 
Z) < 0 are 

7) = -1, ~2, --3, -1, -11, -19, -43, -67, -163. 

It is seen that conditions for an imaginary field of class number 1 are in- 
creasingly complicated as |Z)| increases. For example, p < |^//4|, then 
p cannot have a nontrivial ideal factor that is principal (by Lemma 1, §3). 
Since \dj^\ > V\d\ for \d\ > 16, we see that for h{d) = 1 and |t/| > 16 it is 
necessary and (easily) sufficient that 

(dip) = — 1 for /? < Vd. 

First of all, d is prime and therefore d = — 1 (mod 4); otherwise, d has a 
prime divisor, p^ < Vd for which (d/pi) = 0. Thus 

(d/2) = — 1, so d = 5 (mod 8), if \d\ > 16, 

(^//3) = -1, so = -1 (mod3), if \d\ > 16, 

{djS) = - 1, so ^3^ = ±2 (mod 5), if \d\ > 25 

(J/7) = - 1 , so ^ = 3, 5, 6 (mod 7), if \d\ > 49 



Thus we see that d becomes subjected to an increasing number of 
restrictions if h{d) = 1. Eventually, a conclusive proof that there is only 
a finite number of < 0 for which h{d) = 1 was given in 1934 by Heilbronn 
and Linfoot. It seems “very certain” that the last one is = —163 (as 
Gauss conjectured), on the basis of numerical evidence of Lehmer showing 
\d\ > ifd< -163 and h(d) = L 

In the case of real fields, incidentally. Gauss conjectured that h(d) = 1 
infinitely often (and has not been contradicted or justified). 

7. Units and Class Calculation of Real Quadratic Fields 

The same procedures are valid in the case of real quadratic fields. The 
difficulty is always that there is no easy way to tell if an algebraic integer 
exists with given norm, even if the unit is known, except by labored trial 
and error. 

We shall discuss another procedure readily applicable to the real and 
complex case for obtaining both class structure and the fundamental unit 
(when required). 
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We note in similar fashion when /) = —2, —3, —7, —11, h(d) = 1. 
When D = —5, d = —20, p < a/20; thus we must test /? = 2, 3. 
Here all we need consider is A^(l + V —5) = 6 = 2*3; hence (1 + 
= 2i3i, whereas 2 = 2^, Hence all ideals are equivalent to 1 or 2i, 
^2 ^^21^ 3i“^. Once we know that 2^ is nonprincipal (by 

Lemma 1, §3), we know /z(— 20) = 2. 

A more challenging case is Z) = — 14, c/ = —56, where A = 4. We 
outline the essential steps for the reader to verify: 

p <V\d\ for /? = 2, 3, 5, 7, 

{dip) = + 1 for /? = 3, 5, 

{djp) = 0 for /? = 2, 7, 

(a) 2 = 2i2, 2i = (2, V^), 

7 = V, 7i = (7,V^), 

(b) 2j • 7i = (14, 7\/^, 14) 

= V^4{- • • , 2, 7 , • • •) = 

(c) 3=3 i- 32; 3i = (3, I + V^), 3 j, = (3, 1 - V^), 

15 = lV(a), a = 1 + \^4, 

5 = SiS^; 5i = (5, 1+ V^4), 5^ = (5, 1 - V^). 

(d) 3i • 5i = (15, 3 + 3V^, 5 + 5V^, (1 + 

= (15, 3 + 3\/^, 5 + SV^4, 

6 + 6V^, (1 + \^4f) 

= (15, 1 + V~4, (1 + V~4f) = (1 + V~4) = a'. 
3^2 = (9, 3 + 3V^, -13 + 2V^) 

= (9, 3 + 3V^, -13 + 2\/~4, 16 + V^4) 

= (9, -2 + V^). 

(e) 3 i22i = (18, - 14 - 2V^, 9V^, -4 + ZV^) 

= (18, 16 + V~4) = (18, -2 + V^ 4 ) 

= (-2 + V ^). 

Hence, if 3j ^ J, then = I and 2^ P by (a), (e). Furthermore, 
3g ~ by (c) ; likewise 7i 2 i, §2 3^, 5^ ^ 32, and 3i^ is nonprincipal 

by Lemma 1, §3, since N(3j^) = 9 and 9 ^ (3), 

EXERCISE 10. Work out the class structure for D = —21, D = — 3L 
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We should really test all w up to 16 to be sure of/? < 17, but let us stop 
right here for a moment at m = 10. In the range 0 < m < 10 we have all 
residues modulo 2, 3, 5, 7, or 11, Hence the factors prove 

(dip) = 0 for /? = 2 and (d/p) = 1 for /? = 3, 5, 7 
(which are present as factors), 

(djp) = — 1 for /? = 11 (which is absent as a factor). 

We have yet to test p = 13 and p — 11, but (p =) 13, by a stroke of good 
hick, occurs in that 13 | A^(l — o>). We might suspect, however, (4 • 79/17) 
= — 1, and rather than calculate /(ll) , * • • , /(16) we note (79/17) = 
(-6/17) = (6/17) = (2/17)(3/17) = 1 * (17/3) = (-1/3) = -1 by recipro- 
city. 

We next look for generators of the ideal classes. Again we are lucky: 
2 = where 2^ = 2g = (9 — co) is principal, or 2^ ^ 1. Next we can 
write, in ideal factors, 

1^(1 _ o>) = 2i3il3i--3il3i. 



Hence 13i is in the cycle generated by 3j (in fact, the inverse). From now 
on 3i and 32 are labeled by the residue classes. For instance, if ^ = 1 
(mod 3), then q — io = 3[(q — l)/3] + (1 — to) and 

3i I (^ — ft>) whereas 3g f (^ — w), 

since 3i ^ 3<^ and 3^32 = (3) f (^ — (o). Likewise 3 | N(1 — co); thus, 
if ^ = 2 (mod 3), 

3^\(q — (jS) whereas 3j -f (^ — to). 

We therefore write 

I ^ (8 — a>) = 325 i 

(which henceforth labels 5j and 52 according to residues of m mod 5). It 
is clear that 5j is in the cycle generated by 32- Likewise from (4 — o>) = 
3^1 1 it is clear that 1^ also lies in the cycle generated by 3i. Thus, using 
conjugates as inverses, it is clear that powers of 3^ generate all ideal classes. 
Finally, 

I^(5-co)-2i32^-32^ 



Thus 32 is of order 3 or principal. 

We now digress : to find a unit, note that since = 2g 

(9 - o?) = 2i = 22 = (9 - o>'). 

Thus (9 — o>)/(9 — (o') is a unit = rj. 



7j = 



(9 - co)^ ^ 81 - 18(0 + 79 
N(9 - (o) ^ 2 



= 80 - 9^79. 



2 
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Let the field R{V D) have basis [1, w]. Then call f(m) = N(m — co). 
Thus, with D square-free, 

( 1 ) 

fm(m - 1) - (D - l)/4, D = 1 (mod 4), co = (I -|- JO)/2, 
f(m) = j 

[m^ — D, D ^ I (mod 4), co = ^ D. 

We take a range of m, 

(2) 0 < w < 

Next we calculate the values / (m) in the range and factor each answer. 
Those p for which {djp) — 1 or 0 will appear as factors of / {m) for each 
such that (see Theorem 2, §1) 

Xi = w (mod p,), p <V \d\. 

No other p (i.e., for which {djp) = — 1) appears as a factor of any 
N{od — aw) = / (aw), for then /? | (co — aw)(co' — aw), and since {p) is prime, 
p divides one factor (say) co — aw, which contradicts the basis Oj = [1, co] 
by Theorem 3, Chapter IV, §6. 

We therefore have taken into account all p of norm < V|c/|. The class 
structure and units can be deduced from the fact that each (co — aw) is a 
principal ideal not divisible by any rational prime. Hence m — co is never 
divisible by both p and p'. Perhaps a somewhat difficult example can 
indicate how to “play by ear.” Let 

£> = 79 , <7 =79 - 4 , (o = VT9, p < VJl6 = 11, • ■ ■ , 

f(m) = m^- 79 . 



Function 




Values 




Factors 




Norms 


m 


= 


-79 




-79 




V(0 - 


co) 


/(i) 


= 


-78 


= 


-2-3-13 


= 


N(\ - 


(O) 


/(2) 


= 


-75 


= 


-3 • 52 


= 


N(2 - 


co) 


/(3) 


= 


-70 


= 


-2-5-7 


= 


N(3 - 


co) 


/(4) 


= 


-63 


= 


- 32-7 




N{4 - 


co) 


/(5) 


= 


-54 


= 


-2 - 33 


= 


N{5 - 


co) 


/(6) 




-43 


= 


-43 




N(6 - 


co) 


/(7) 


= 


-30 


= 


-2-3-5 




N(7 - 


co) 


m 




-15 


= 


-3-5 


= 


V(8 - 


co) 


m 


= 


2 




2 


= 


N(9 - 


co) 


/(lO) 




21 


= 


3-7 


= 


iV(10 - 


- co) 




[Sec. 8] THE FAMOUS POLYNOMIALS X^ X + q 


155 


EXERCISE 13. From the following data alone deduce the class number of 


— 79 ) by justifying the factorizations on the right; 




f{x) = + » + 20 = N{x + cu) 




to = ( + 1 + V3t9)/2 




/(O) = 20 


(«>) = 2i*5i 


/(I) = 22 


(1 +a>) =22lli 


/(2) = 26 


(2 + o>) = 2il3i 


/(3) = 32 


(3 + (o) = 2g® 


/(4) = 40 


(4 + t«) = 2 i*52 


11 

0 


(5 +w)= 2^5^ 


/(6) = 62 


(6 + w) = 2i31i 



EXERCISE 14. Find the class structure of 31) and /?(V31) by the 

method of this section. 

EXERCISE 15. Find a nontrivial unit of /?( V 31 ) from the table for Exercise 14. 
Hint. Factor 6 — ^31 and 9 — V 31 and recall 2^ — 2. 

EXERCISE 16. Show that if g and p are primes and r > 0 is an odd integer then 
the field generated by a square free (negative) number 

= if < 0. 

has a class number divisible by p if \d\ > Ag. (Note in Exercise 13, r =l,g =2, 
p = 5, -79.) 

EXERCISE 17. Invent some fields of class number divisible by 2, 3, 5, 7, 11 by 
experimenting with the preceding problem. Try g 2 and see which suitable r 
exists. Also try ^ =3, etc. 



*8. The Famous Polynomials ^ + q 



Euler discovered that the polynomials for certain positive values of q 



( 1 ) 



f^(x) = x^ + x-\-q 



take on only prime values when 0 < x 
polynomials are listed as follows : 

+ 3; 9 = 3, 

x^-{-xA‘5; 9 = 5 , 

( 2 ) 0^2 4 . X + 11 ; 9 = 11 , 

x^ A- X + 17; 9 = 17, 

+ a: -f 41 ; 9 = 41, 



9 — 2 . The values of 9 and the 



1 - 49 = - 11 ; 
1 - 49 = -19; 
1 - 49 = -43; 
1 ^ 49 = -67; 
1 -- 49 = -163 



The values of 1 — Aq d, coincidentally, are precisely those for which the 
field has class number 1. In fact, for 1 -- Aq = — 7, — 3 or 9 = 2, 1, 

which are not listed, the polynomials fg(x) still do assume only prime values 
for 0 < X < 9 — 2 , although in a trivial sense. 
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Another unit can be found by setting 



7 — o> = 2 i3i52 

8 — CO = 325i 

Thus (7 — co)/(9 — co)(8 — co') is a unit = 

With somewhat more laborious calculation, using conjugates, 

(7 - V79)(9 + V^)(8 - 
(9 - V?9)(9 + V79)(8 - V79)(8 + ^ 79 ) 

This unit is not necessary for the problem, but it is inserted to remind the 
reader to not always expect a lucky result. We can actually prove from 
the procedures of Chapter VI that 80 + 9V 79 is the fundamental unit. 

Now to prove S^is nonprincipal or N(a + bco) 7 ^ ±3 for integral a, b 
we refer to Theorem 5. We must simply show the root of equation 

— /la ± 3 = 0 

never belongs to i?(V 79) when \A\ <Vn{\ 4- ??o) = V3(80 + 9\/ 19) = 
278 * * * . But ± 4« = zt 12 = 19g^ for some integer in order 
that a belong to R{V 79). By the power residue tables, we note the solva- 
bility of 

^2 ^ -12 = 3^8 (mod 79). 

(Since 79 = —1 (mod 4), -fl2 is consequently a nonresidue.) Thus 
A = ±324 = ±15 (mod 79). 

We now try A = 19k ± 15, for /: = 0, 1, 2, . 



^ = 15 


+ 12 = 237 


= 


3 -79 


= 64 


= 4108 


= 


2* • 13 • 79 


= 94 


= 8848 


= 


2*- 7-79 


= 143 


= 20461 


= 


7 -37 -79 


= 173 


= 29941 


= 


379 -79 


= 222 


= 49296 


= 


2« • 3 ■ 13 • 79 


= 252 


= 63516 




22- 3 -67 -79 



In no case where A < 279 is ^ 12 = 79g^ for an integer g. Thus is 
nonprincipal and A(316) = 3. 

EXERCISE 11. Complete the table with /(H) through /(16) and list the ideal 
factors of each ^ — o>, 0 < ^ < 16. 

EXERCISE 12. Find another unit (not ±1) from the information in the 
extended table. Compare with 
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THEOREM 6. The polynomial f^(x) will assume prime values for 0 < 
X < q — 2 if and only if for d = I — 4q, R(Vd) has class number I. 

Froof. Let us assume //a) is composite for some a in the range 0 < a < 
q-2: 

/,(a) - 2y + (q -2) + q = - 2q + 2 <q^. 

Now we can conclude that at least one prime factor of fg(a), namely p, is 
<{q — 1). Thus 

p<q^\={\-d)l4^\= {\d\ - 3)/4 < 1^1/4, 
whereas, if we define 

1 + \Jd 

CO = , 

2 

then 

f^{a) = N{a + co) = 0 (mod p). 

Now, easily, (jc?, a + co) = p | (/?), yet p is not principal, since no prime 
exists of norm p (by Lemma 1, §3). Thus the class number is unequal to 1. 

Let us assume, conversely, that f^{x) is always prime for 0 < a: < ^ — 2. 
We shall prove that for all p in the range 2 < /? < V|d| we would have the 
relation {djp) = —1. (Hence the class number is 1 for want of primes to 
split or ramify!) First we note that ^ — 2 > V |c/|, since {q — 2Y >4q — \ 
when ^>11. (This means that the theorem must be verified separately 
for ^ = 3,5, 7.) If any prime p <V\d\ exists for which {djp) = + 1 or 0, 
then some integer a exists for which (by Theorem 2) 

fj,a) = N{a + co) = 0 (mod p). 

Since each such a is determined only modulo p, we write 

(3) 0 < a < /? < V|c/| < ^ — 2. 

Thus, if/g(a) is always prime, /^(a) = p, which is a contradiction, since p = 
fjja) >/a(0) = q, contrary to (3). Q.E.D. 
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Class number formulas and 
primes in arithmetic progression 



1. Introduction of Analysis into Number Theory 

In this chapter we derive a formula for h{d), the class number of a 
quadratic field of discriminant d, which makes use of infinite processes 
such as series and limits. The purpose of the formula is to enable us to 
calculate h(d) directly from d but without gaining any group-theoretic 
knowledge of the class structure. 

The real value of this formula historically is that it enabled Dirichlet to 
prove the following famous result (1837): 

THEOREM I. If 0 and m are relatively prime positive integers, then 
there exists an infinitude of primes in the arithmetic progression 

u, 0 + m, 0 -f 2m, o + 3m, a -p 4m, • * • . 

The result was monumental for many reasons. First, as we shall see, it 
required infinite series, convergence, limits, logarithms, etc., and any 
number of concepts seemingly alien to the theory of integers. From this 
point forward it became an increasingly acceptable procedure to use 
limiting processes in number theory. Second, the fact that class structure 
should be relevant to arithmetic progressions is still largely unexplored, 
and results, as good as they are, lie in an esoteric synthesis of number 
theory, analysis, and algebra called “class-field theory.” 
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FIGURE lO.l 



which intersect the boundary of the curve, we find that the difference 
between the number of squares in 0 (or the number of lattice points interior 
to the curve) and the area of the curve is less in value than the number of 
shaded squares in Figure 10.1. It can then be shown (see Exercise 1, below) 
that the number of shaded squares is less than 8 + 8Af. 

If r > 1, then 8 + %kVT < (8 + Sk)VT, leading to the following 
result (in terms of constants k and k' determined by the shape of the 
ellipse) : 

THEOREM 2 (Gauss). The number of lattice points inside ellipse (I) is 
given by 

(5) N = IttTIV a + error, 

where the error is bounded by k'V T as T oo. (We say that the error has 
“order of magnitude” VT.) 

EXERCISE 1. Prove that the number of shaded squares in Figure 10.1 is less 
than 8 + 8M by selecting four points A, B, C, D on the curve for which the slope 
is ±1. Show, for example, that if on the arc DA the slope lies between —1 and 
+ 1 then the shaded squares covering that portion DA of the arc are fewer than 
2 plus twice the x-projection of the curve. 

3. Ideal Density in Complex Fields 

In order to obtain an ideal-theoretic interpretation of Gauss’s lattice- 
point result, we consider a complex quadratic field of discriminant d <0. 
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The present chapter is therefore the one of greatest mathematical scope 
in the book, but it can scarcely do justice to the subject matter because of 
its brevity. 

2. Lattice Points in Ellipse 

We begin with the problem, due to Gauss, of finding the number of 
lattice points with integral coordinates in a family of ellipses. We consider 
the set of ellipses 

(1) Ax^ + Bxy A’ Cy^^T 

in the (x, y) plane, where A, B, C are fixed integers with 

(2) -52 = A > 0 

and r is a positive integer which is to approach infinity. It would seem 
intuitively clear that the number of integral lattice points inside the ellipse 
is approximately the area. 

Before considering this more closely, we show that the exact value of the 
area is IttTIV A. A rotation of axis is known which enables us to write 

(3) A'x^ + Cy^ = r, (or B' = 0), 

where x\ y is a new coordinate system at angle arctan Bj{A — C) with the 
old one. The area inside the ellipse (3), by an elementary calculation, is 
ttTIV A'C\ but by the rotational invariance property of a conic B^^-AAC^^ 
B'^ — 4A'C; thus the area is InT/V 4A'C' — 0^ = InT/V A. The major 
axis of the ellipse is by similarity exactly Vt • where k is a. constant, 
namely, the major axis of the ellipse, 

(4) Ax^ + Bxy + Cy*^ = 1, 
which we need not find explicitly. 

We now consider lattice points inside any smooth convex curve of 
width M. 

There is little difficulty in showing the geometric relationship between 
area and the number of lattice points. All we need do is to surround each 
integral lattice point (x, y) by a square of side 1, centered at this point, e.g., 
bounded by the lines of ordinates y and abscissas a; ± 4- The {x, y) 
interior to the curve determine a set of squares S. These are shown in 
Figure 10.1. (Note vertical shading in those squares of S which intersect 
the boundary of the curve. If we shade horizontally all squares outside S 

‘ To avoid a burdensome notation, we shall use the same symbols {x, y) for lattice 
points as for the “general” point of the plane. 
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w as the number of units of the field of V?, then by the result in Chapter VI 

" w = 6 for c/ = —3, 

. w z= 4 for d = —4, 

>v = 2 for other d. 



Hence each ideal (a) satisfying (4a) corresponds to w points a in the ellipse. 
Therefore, from the number of lattice points in ellipse (4a) 



F(A, T) = G(a, TV[a]) 

^ 1 27rrv[g] 

W- V M|iv[a]® 



+ error. 



( 7 ) 



F(A, T) = Tfc + error 

K — 

wV \d\ 



Here k is the (complex) Dirichlet structure constant. The error has the 
order of magnitude of V T. 

If we go further and define 



(8) F{T) = 

we see that 



number of ideals of any class with 
0 < Nla] < r, 



(9) F(T) = |F(A,T), 

where the summation is over h different classes A. But for each class (7) is 
valid; thus 

(10) F(T) = hKT + error, 

where the error still has the order of magnitude of Vt. A quicker way of 
stating the essential result is that the ideals have norm density given by 

(11) lim F(T)/T= hK. 

T-»ao 



4. Ideal Density in Real Fields 

To extend the result of §3 to real quadratic fields, we start with the 
function G(a, T) defined precisely as in (2), §3. The difference is that the 
locus [corresponding to (4^), §3] is derived from 

(1) |V(a)| < TN[a]. 
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We define for each ideal class A and parameter T 

r number of ideals a belonging to 

(1) F(A, r) = i the class A"^ for which 

[o< JV[a] ^T. 

It is evident from the Corollary to Theorem 4 in Chapter VII, §4 that 
jF(A, T) is always finite. We now define a closely related 

r number of ideals (a) formed by 

(2) G(a, T) = j taking a in a for which 

[0<iV[(a)] <T. 

It then follows that if a belongs to class A then 

(3) F(A, T) = G(a, TN[a]) 

To see this, note that the (a) just described can be factored (a) = ab, where 
b belongs to A~^, and, conversely, every b in A~^ defines a principal ideal 

(а) = ab. Thus every b in A“^ with N[h] < T corresponds uniquely to an 
ideal (a) in a with A^[(a)] < 7W[a]. 

The function G(a, 7W[a]) is found from the inequality 

(4a) 0 < N[((x)] < TN[al 

Specifically, if a = [a^, ag] then, in coordinate form, for a in a 
a = a^x -f Gc^ 

(5a) a' = (x^'x + cx.^'y 

‘ [ iV[(a)] = aa' = 

We are therefore concerned with lattice points inside the ellipse, 

(4b) Ax^ + Bxy + Cy^ = TN[al 

where 

(5b) A = ociOLi, B = C = agag', 

and 

A = 4(aia/)(a2a20 - 

0 < A = — aga/)^ = —{VdN[c[^^, 

(б) \A\^\d\N[af 

by the index formula (6) of Chapter IV, §10. 

We must, however, ask if each a inside the ellipse (4b) corresponds to a 
different ideal. Generally a and — a represent the same ideal. If we define 
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where k is the (real) Dirichlet structure constant. Finally, with F(T) defined 
[as in (8), §3]by2F(A,D, 

(9) F(T) = HkT + error, 

where the errors are all of “order of magnitude” V T. The norm density 
again is Hk. 

EXERCISE 2. Verify that the required sectors of the hyperbola (containing 
primary solutions) for \x^ — 2y^\ < 1 are limited by x > 2y > 0 and y > x > 0 
by applying Exercise 6 of Chapter IX, §2. (Here = 1, aa = V2, = 

1 4- V2.) Plot the primary solutions in the (x, y) plane. 

EXERCISE 3. Extend the argument in §2 to show that the error term in 
approximating lattice points by area of a hyperbolic sector is still of the order V T. 
EXERCISE 4. Tabulate F(T) for d = —4 and = 8 for T < 25 by considering 
the factorizations of all algebraic integers of the respective fields of norm < 25. 
(Here the ideals are, of course, all principal.) Observe the ratio F{T)jT. 
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Using substitutions analogous with (5b), §3, we write 



and 



a = ajo; + a' = a/a; + 



(2) l(aiai>^ + (aiaa' + < TiV[a]. 



As we shall see, the inequality (2) is satisfied by an infinite number of 
pairs of integers, as T becomes large enough. 

We therefore select from the lattice points satisfying (2) only those which 
correspond to primary numbers (Chapter IX, §2). For these numbers a the 
conjugates a and a' are related by 

(3) 1 < I a/a' I < a > 0, 



where rj^ is the fundamental unit. Thus, if we supplement inequality (2) by 



(4) 



+ (X.2V 
+ Cf.^y 



<ni\ 



oi^x + cf^y > 0 . 



We then obtain two sectors of a hyperbola. In finding the number of 
lattice points, once more we use the area as an approximation. This time 
it is convenient to change coordinates : 



(5) 



f = ai^r + x^y, 
I' = x^x + a^y\ 



then it can be shown that the upper one of the sectors, defined by the 
inequalities analogous to (1) and (4), is 



( 6 ) 



iff I <U^TN[a] 

I < f/f ' < f > f ' > 0. 



Its area is precisely the following combination of an integral and equal 
triangles : 




Ud^lS + AO^C -- ^OBD = U log??!, 



as seen in Figure 10.2. The ratio of areas from the ff ' to the xy plane is the 
determinant la^ag' — aga^'l = N[a]. Hence, using two sectors of the 

hyperbola. 



(7) 



G(o, TJV[a]) = 

A[a] 



4- error; 



and we define F(A, 7), as in (1), §3, by 



( 8 ) 



F(A, T) = Tk error 
2 log 
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or multiplying 




< 1 , 



\(s - ms ) - ii< - 1), 



and as 5 i the conciusion (3) holds. Hence 4 ( 5 ) 00 as j ^ 1. Actually, 

the only interesting values of s in the whole chapter are those s that are 
near 1. 



6« Euler Factorization 



We now note a form of the unique factorization theorem. Consider the 
infinite product of series, multiplied over all primes, namely, 

The formal multiplication must yield all products of 

pr 



for primes Pi and exponents a,. The unique factorization theorem tells us 
that every positive integer n occurs once to make up 

(2) = 

1 n] 

But 




Thus 

(3) i-, = m = na - p~r\ 

1 « 3> 

where the product is extended over all primes. 

Actually, Euler attached a great significance to the representation (3). 
He noted, on the left, that as 1, ^( 5 ) ^ oc, whereas on the right a 
product over primes occurred. Hence there must be an infinite number of 
primes; otherwise -> 11(1 — p~^) (over a finite set) or ^(.y) 00 . 
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5. Infinite Series, the Zeta-Function 

In order not to become completely distracted by issues of real analysis, 
we shall use infinite series in a formal way, leaving to the more energetic 
reader the problem of verifying that the conditions for convergence are 
taken into account. 




The main type of infinite series that we shall use is the so-called zeta 



series : 

(1) ^(s) = 1 + i + 1 + 1 + . . . . 



Here 5 is a real continuous variable, .y > 1 . By the experience of elementary 
calculus, we know that the series converges for ^ > 1 by comparison with 



the area 
( 2 ) 



dr 1 °° 

— == = “finite integral.’' 

J 1 — sJ 



More important is the result that 

( 3 ) 



as ^ 1. To see this, note by comparison of areas in Figure 10.3 that 



n i 

2 V 


~s<^’ 


M 


‘ ) 


x = l X^ 


Jl X 


1 x^ s-V 


^ (n + ly-y 
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Thus, taking logarithms of relation (3), we find 



log?(s) =2 log 



( 7 ) 



V 1 , 

= Z h error. 



The error is less than S (l//?^0 < ^ < ^(2), for ^ > 1. Hence 

since — 1) 1, 

log C(s) = log [C(s)(s - 1)] + log ^ 



s — 1 



and 

( 8 ) 



y — = log — h bounded error, 

p p" (s - 1) 

as 5 -> 1, providing additional evidence that there is an infinite number of 
primes, according to Euler’s technique. 

EXERCISE 5. Using Hilbert’s example of “nonunique factorization,” consider 






where the sum is over positive n = \ (mod 4) and the product over “indecom- 
posible” p = \ (mod 4), with no factor < p of the same type. (See Chapter III, 
§5.) Single out the first term gjn^ for which both sides will fail to check. 

7. The Zeta-Function and L-Series for a Field 

We next consider the series called the zeta-function for a field 

1 



( 1 ) 



C(s;d) =2 



N[aY 



summed over the norms of all ideals (excluding zero) in the field of 
discriminant d. Rather than concern ourselves with convergence immedi- 
ately, we note “formally,” i.e., assuming convergence, 



( 2 ) 






over all prime ideals by virtue of unique factorization, according to the 
method of Euler. 

The methods of Chapter IX tell us how to decompose further the product 

( 3 ) == ITi 1X21X3- 

Here Y[i is the product over all primes p (= for which (djq) = — 1 ; for 
these A^[(^)] = q^. Furthermore, JJ 2 is the product over all primes p for 
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A related statement is the following: 



THEOREM 3. 
integers a, b, 

then 

( 4 ) 



If f(o) is a completely^ multiplicative function of positive 



f(a)f(b) = f(ab), 




provided the sum on the left is absolutely convergent. 

A word of explanation is in order concerning the use of infinite series. 
It is ordinarily assumed that care concerning the use of series is reserved for 
the “ultrafastidious” personalities in mathematics. This was generally 
believed until Riemann (1859) attempted to find a distribution formula 
for the «th prime, using the ^( 5 ) function. He made many “plausible” 
statements (and some incorrect ones), believing that the analysis was only a 
matter of detail, but it took almost 50 years before enough details could 
be supplied by his successors to prove the most basic result, that /?„, the 
«th prime, satisfies the limit 

pj{n log n)^ I as co. 

As is well known, all of Riemann’s statements have not been settled, and, 
as a result, analysis, as applied to number theory, is treated with caution 
bordering on suspicion. The use of infinite series, here, gives no cause for 
suspicion, and the reader can supply any missing details. 

As an example of what is involved in the analysis, let us introduce 
logarithms. We write in accordance with calculus 

2 3 

(5) log(l + 0-l-^ + ^ 

(6) '“ 8 ( 1 -^) -p + 57. + ^ + '" + 

1 , 

= h error 

P' 

where the error is less than 

^ 

since /?* > 2 and [1 — (1//?*)]^^ < [1 — (1/2)]“^ = 2. 

^ An (ordinary) multiplicative function is one for which the indicated relationship is 
imposed only when (a, b) — 1, such as /(a) = <f>{a), the Euler function of elementary 
number theory. 
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terms with equal values of A^(o) we find 



( 1 ) C(s;d)=l 



1 ^ fXl) . F(2) - F(l) F(3) - F(2) 

N[aY V T 3’ 



since f(r) — F{J — 1) is the precise number of ideals a for which T = 
iV[o]. If we rearrange the series, we find 



( 2 ) 



?(s;d) = f F{T)(- — ). 

T=i Vr* (T+ IW 



It is easily seen that 

(3) — i_=j-ri_(i+iri 

T> \ t/ ] 

T‘l \ T 



Ti 



•)] 



-S + 1 



+ error. 



It can therefore be seen that for all 5 > 1 the error is < for Q 

constant. Thus, substituting into (2) and summing, we see 



(4) 



C(s; d) = • — + finite error. ^ 

1 T T* 



But F(T)jT hK for the various values of k and h(d) in §§3 and 4 (above). 
The error in the limit is less than cjV T for Cg, a constant. Thus 

CO J 

^(s; d) = s/i/cT h finite error 

1 r® 



(5) 

or 

( 6 ) 
as s 
(7) 



(s — 1)^(^; d) = s(s — l)l(s)hK + (finite error)(5 — 1), 

1. If we refer to (6a) in §7 and (3) in §5; 

L(s ; d) /z/c, 

as .s -> 1 . We can go further and set s = 1 , from (8) in §7. Then 
u.. ^ r/^1 . _ V 



f,K = L(l;d)=2 
1 



^ We shall use the expression “finite error’' to mean a variable that remains finite as 
.y -► 1. 
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which p \p and {djp) =4-1. There are two factors for Pi and pg and 
^[Pi] = A^tPa] = P- Finally, Hs is the product over all primes r | r [ for 
which (djr) — 0, iV[r] = r. Hence 



(4) 4) =n. (i - ^)"n. (i - - p)"- 

or 

(5) te4).n,(i-i)"(i + i)“ 



We can easily recognize ^( 5 ) in the product, since categories q, r exhaust 
all primes. Thus 

{ed) as;d)=^a^)L(s;d), 



where we define 

(6b) L(s ; d) = Hi ( 1 + Ha ( 1 - ^3 (1). 



Now, combining all cases (p, q, and the “missing” r) into one symbol p, 
we find 



(7) 



L(s; d) 



= n(i- 

V \ 



(dlp)Y 



taken over all primes p. By Theorem 2, since f{x) = (d/x) is completely 
multiplicative for a; > 0 (by properties of the Kronecker symbol), 



( 8 ) 



(din) 



L(s; d) = 2 

1 n 



This function L{s\d) is known as Dirichlefs L-series, In all cases the 
convergence is no problem when .s > 1 . 

EXERCISE 6. Write out the first 25 terms of Us; d) for d = -4 and = 8, 
noting that some values of A^(a) occur more than once, some not at all. (Use 
Exercise 4, §4 above.) 



8. Connection with Ideal Classes 

To tie the zeta~function for a field with a class number we return to the 
function F(T) defined in (8), §3. We note that if in the series we collect all 
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9. Some Simple Class Numbers 

As our first example, take d = —4. Here 

L(l;^4) = 1 ~ J + + J + 

since (—4/a:) = ± 1 according as a: = ±1 (mod 4), (x odd). It is easy to see 
that L {\ ; — 4) = tt/ 4. In fact, 



== = f\l - a:^ + 

4 Jo 1 + Jo 



x‘^+*“+)dx = L(l;-4), 



integrating term by term. But k = 27t/4a/ 1—41 = tt/ 4. Thus = 1. 

As a second example, take d = 5. Here 

Z(l; 5) = (1 - i - 1 + 1 ) + a - i i + i) + • • • , 

the plus sign going with residue and the minus sign with nonresidues 
modulo 5. 

L(1 ; 5) = I dx[(l — a: — o:^ + o:^) + (x^ — a:® — o:^ + o:^) + • • •] 

Jo 



= j dx(i — a; — o:^ + o:^)[l + o:^ + + • • •] 

Jo 



= \^dx 

Jo 



(1 — a: — o:^ + ^^) 

1 - a:® 



=/■ 

•/o 



(1 — x^) dx 



(1 + a: 4- o:^ + o:^+ x^) 



It is well-known that any rational function may be integrated by the method 
of (complex) partial fractions. We can avail ourselves, however, of the 
following trick. Let a: -f l/x = y, (1 — Ijx^) dx = dy; 



L(l;5) = - P 
Jo 



(1 — l/o:^) dx 



_ f" dy _ T" d: 

J2 + V — 1 — 



1 /x^ + 1 /x + 1 + X -h x^ Jz y^ + y — i 



dz 

H 2" - 5/4 



2V5/4 "5/2-V5/2 ^ 5^2 

by well-known formulas. But for d = 5, (Vs + l)/2; hence 
/c = L(l; 5) andh = 1. 

The evaluation of other integrals is a more complicated matter. It is not 
hard to see that in general we shall obtain 






l«i| 



where f^{x) = J x*-\djt). By the theory of partial fractions, we can 
decompose 



fdjx) 
1 - 



= 2 



A + Bx 
x^ ^ ax + b 
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We have thus asserted that the limit of L(s; fi?) as 1 is merely 
L(1 ; d), found by substituting 5 = 1. This proposition of continuity of the 
series in the parameter s is not trivial, although it involves well-known 
procedures of analysis.^ We shall merely rewrite L(s; d), 



(9) 



L(s ; d) = 2 



(din) 



n=l n" 



in a form that will make convergence manifest for 5 > 1. 
We first define 



(10) E(n) = (dll) + (djl) + • • • + (din); E(0) = 0, 



so that, analogous with the rearrangement performed earlier, 

(11) (din) = E{n) - E(n - 1), (n > 1). 

But it n = kd + e.g., njd, has quotient k and remainder r, 

(12) £(n) = I(dfx)+ Y (dM- 

x = l x=kd + l 

Now (dikd + ^) = (dir) by the conductor properties of the discriminant d 
(see Chapter II, §6). Furthermore, 

2 (d/x) = 0, 

x-1 



since the orthogonality relation (16) of Chapter II, §2, now applies with 
X(x) = (dix) and Xoi^X two dilferent characters modulo d. Thus the 
first sum in (12) is 0 and 

kd-\-r T 

(13) |£(n)| < 2 \(dl^)\ < 1 1 = r < d. 



a = /erf + 1 

Using the rearrangement of (2), 



(14) L(s; d) = 2 y = 2 £(n)(l 

n = l n n = l \n® 



1 

(n + 1)' 



and inequality (13) yields on a term-by-term comparison [see (3)] 

(15) \L(s; d)l < 2 + error), 

where the error is < This shows convergence for j > 1. 



^ The reader, familiar with the sufficiency of uniform convergence for continuity, will 
recognize the series (14), below, to be uniformly convergent for j > 1, whence the same 
will hold for the rearranged series (9). 
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We must interpret the logarithm as the complex logarithm, in general, 
using the MacLaurin series 

(4) log (1 + 2 ) = ^ - z^l2 + z^l3 + . . . + \r+\z-ln) + • • • 

valid for real or complex 2 if 1^1 < 1 . 

The connection with primes in arithmetic progressions is brought out if 
we take some definite relatively prime residue class a modulo m. If we 
multiply (3) by and sum over in X which denotes the finite set of 
characters, 

(5) J, log L(s,x) =11. ^ + error 

XinX X P 

=2^2 X~\a) x(p) + error. 

V P X 

Hence, by (17) in §2, Chapter II, the inner sum 

1x~\a) Xip) 

X 

equals if p = a (mod m) and 0 otherwise. Thus 

(6) 1 X~\^) ^og L{s, x) = 1 - + error, 

X j3=a(modw) p* 

where the “error” remains finite as .y 1 . We shall show that the left-hand 
term approaches 00 as .y ^ 1. This will prove Dirichlet’s theorem (for the 
sum on the right would have to contain an infinite number of primes). 

To see a simple case, let us take m = 4, where our purpose is to show 
that there is an infinitude of primes of type /? = 1 (mod 4) and of type 
q ^ 3 (mod 4). Analogously, with Euler’s proof in §3, we would wish to 
show that the following two quantities approach 00 as 5 1 : 

fill =n (1 - is > 1), 

(7) 

Iit 2 =n (1 - vpt\ is > 1). 

Q 

Here we note (for m = 4) that x can be two functions : 

XM = (4/2/) = 1, 

Xiiy) = (- 4 / 2 /) = (- iy > 0 ), 

for y odd, whereas each xiy) = 0 when y is even. Symbolically, 

xiip) = Xiip) = 1 ; Xiiq) = -Xiiq) = i- 

We also introduce, in accordance with ^ 4 ( 9 ), 

III' =na + ^!qr\ is > 1), 
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by first reducing the left-hand fraction to lowest terms and then factoring 
the new reduced denominator into quadratic factors. For example, when 
= 8, using the indicated partial fractions 

fix) ^ (1 - a:^)(l - X*) ^ 1 - 
1 “ 1 — 1 + x^’ 

1 — __ A Bx A' — B'x 

1 + x^ x^ — yj2x +1 -f yj2x + 1 ' 

we find, comparing coefficients, that A = A' = B ^ B' = — jVl. 

It will be no surprise that the class number can be explicitly evaluated 
for all quadratic fields by evaluating the integral for L(1 ; d). The manipu- 
lations involved are of no further interest,^ at present. 

We shall make a more startling use of the formula for L{\ ; d) even 
without being able to evaluate it explicitly. 

EXERCISE 7. Carry out the calculation of h when d = -3. 

EXERCISE 8. Do the same when = 8. 

EXERCISE 9. If xfpi) = g{x), show giljx) = g{x) or —gix) according to the sign 
of d, by Exercise 9, Chapter II, §6. 



10. Dirichlet L-Series and Primes in Arithmetic Progression 



The historical consummation of the class-number formula has not been 
the numerical usage of the formula but the application to primes in arith- 
metic progression. We must first digress to define the Dirichlet L-series for 
a character %{x) modulo m as 



( 1 ) 



1 n 



The product formula (4) of §6 yields 

(2) ^5,z)=n(i-^^r. 

p \ p / 

and the logarithm formula (5) of §6 yields similarly for 5' > 1 

(3) log L(s ,x)=1, x(p)Ip‘ + error ; 

P 

where the “error” again remains bounded as ^ 1, similarly to (7) of §6. 

In all that precedes, of course, we note \%{p)\ = 1 if f m or 0 if /? | w, 
hence all estimates on the error in §8 (above) are certainly still valid here. 



^ See formula (17) in the Concluding Survey. There may interest in the fact that a 
logarithm occurs in T(1 ; d) only if > 0 which is partially explained by Exercise 9 
(below). 
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as ^ 1. But log = —log (j- — 1) + finite error; thus 

(1) log£(^, Xi) = —log — 1) + finite error 

as ^ 1 . 

TYPE II SERIES 

Here x is real and ^ ^ Xv ^se the theorem that every real character 
modulo m satisfies, by Dirichlet’s Lemma, 

( 2 ) x(^) = (Mia), 

where Af is a suitably chosen positive integer, not a perfect square (see 
Chapter II, §7). Thus we can write M = g^d where dis the discriminant of 
some quadratic field. It is easily shown that A/, m, d have (ignoring sign) 
the same square-free kernel, but the exact relationship is irrelevant. Thus 
for a Type II series 




It is clear that if/? f g, then ig^djp) = {dlp)\ otherwise, if/? | g, (gV//?) = 0. 
Hence ^nd if we compare 

(4) L(s;d)=u(i-MV\ 

all p\ / 

then, supplying the factors for JJO) 

(5) L{s; d) = L(s, -TT f 1 - 

p\g\ p / 

Now, since only a finite number of primes divides g, the factor 
approaches the finite limit (^0) 




as 5 1. We have only to observe that the class number h(d) > 1 ; hence 

L(s; d) and L{s, x) approach nonzero limits as .y 1 by formula (8) of §8 
(above) for x of Type II. 
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SO that if we define ITs ~ 111 IT/ we obtain the bounds 
(8) 1 <TT3=na - <«2s). 

Q 

Now the L-series gives us essentially two expressions of “unknown 
behavior,” JXi IT 2 ^"<1 TT^/ni’ 

(8«) Us, xd = (TTi TT 2 ) = «^)(i - ¥) 

(8^) U^> = TI 2 TTi^ ~ (IT2 /ITi) ■ ITs- 

By multiplying and dividing these equations, we obtain 

(9a) U¥ = C(^)(i - ;f4)/TT3] 

(9^^) = C(^)(l - Xi)l 

But as 5 1, ^( 5 ) 00 , L(s, xd (t>y §9), whereas 1 < TTs < m 

Hence Y\i ^ TT 2 -* Q.E.D. 

The reader will note that adding logarithms is simpler, as a matter of 
notation, than handling products, but log [L(^, Xi) L{s, xJ\ and log 
[L(s, Xi)IU^, Xi)] correspond to 2 Z“Ml) log^^. z) and 2z~H3) log 

X X 

L{s, x) required in (5). The replacement of JJ/ by 1/Hi is easily justified 
by the use of logarithms and the neglect of higher order terms in (3). 

11. Behavior of the L-Series, Conclusion of Proof 

We first distinguish three types of L-series; taken modulo m\ 

TYPE I SERIES 

Here x = Zu the unit character only. Then 

Xi{x) = 1 if {x, m) = 1 and Xii^) = 0 if (:r, w) > 1. 

Thus 

us,xi)= n (i-^r 

(/>,W) = l\ pi 

-5»n(i-A)- 

35 1 m \ pi 

The second product U ■ • * has a finite number of factors and approaches 
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Thus, as 5 1 



( 12 ) 






'—log (.y — 1) + finite terms if ;ir = 
merely finite terms if % ^ 



Returning to (6) in §10, we see from the result (12) in §11 that as s 
only xi matters in the sum, or 



(13) 



_J_ log I — i — j = ^ 1 ^ finite error. 

<^(m) \s - 1/ p=a mod m 



1 



Thus there is an infinite number of primes in the arithmetic progression as 
required. 

As an outgrowth of the comparison, we note by (8) in §6 
J, “s 

(14) (as s - 1). 

p p* 

Thus “in some sense” each of the various <f>{m) relatively prime residue 
classes modulo m contains an “equal density” of primes if we measure 
density by the ratio on the left. This mode of measurement has been 
subsequently termed “Dirichlet density.” To conclude the same linear 
density in the sense of a count is not at all easy; e.g., if Yl the 

number of primes <xin the given arithmetic progression (and if 
the total number of primes < x), it is by no means immediate that 



I 



(15) 



XI(x;a, m) 1 

n (») ’ 



(as X oo), 



although this difficult result is true. 



EXERCISE 10. In a grouping analogous to §8, (9) to (15), show the convergence 
of the series in (6) for ^ > 1. 



**12, Weber’s Theorem on Primes in Ideal Classes 

On looking back, we note that quadratic field theory entered the theorem 
on primes in arithmetic progression at only one spot, in showing £( 1 , x) 
if y is a character of Type II. To see this curious fact in greater perspective, 
let us consider a very closely related theorem of Weber (1882). 

THEOREM 4. Every ideal class of a quadratic field contains an Infinite 
number of primes. 

Proof, Let d be the field discriminant as usual. First of all, the primes p, 
for which {djp) = — 1, do not split and therefore are in the principal class. 
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TYPE III SERIES 

Here % is complex. We show, likewise, that L(s, x) x) ^0 as 

5-^1. To see this, let us first note that a continuous derivative 

(6) L'(s, x) = -f, X(n) log n/n* 

1 

exists for ^ > 1. The expression given here is a “term-by-term” derivative.^ 
Hence, if, to the contrary of the assumption of the non-vanishing of the 
L-series, 

(7) 1.(1, X*) = 0. (X* of Type III). 

then we could conclude by the mean value theorem of calculus 

(8) L(s, Xni) — L{s, % 5 jj) L{\^ x^ ~ ^ (*^o> 0 

for 1 < (We henceforth keep s real.) This would all be true even 

if Xi^ were real, but the complex character x^ has the property that for 
its complex conjugate x^^ h necessarily follows that 

(9) L(1,X.) = 0 

by taking a term-by-term conjugate of (7). Then 

(10) L{s, u) = ^'(^ 0 , U){s - 1). 

Now if we sum (3) of §10 over all characters (or take (6) of §10 with a = 1), 
we find 

(11) 2 log f.(s, x) = <Km) 2 - + finite error. 

^ =1 (mod wi) p 

The sum on the right is > 0, as 5 1 . It may (and actually does) approach 

00 , but it certainly will not approach — oo. If we examine the sum on the 
left in (1 1), we will find, by (8) and (10), at least two different x^ ix^ Z*) 
for which a term of order log {s — 1) is contributed by a vanishing L(l, x) 
but only one x~ X\ which —log (s — 1) is contributed to this left- 
hand sum. The net result is that the left-^hand side of (1 1) still approaches 
— 00 , (even more so, if some other L(5, ;^) -> 0 or even if, in (8),L'(‘yo’ X*) 

0 as 5- 1). This makes the left-hand side of (11) approach — oo, contra- 

dicting the assumption (7). 

^The derivative is valid when series (6) is shown to be uniformly convergent for 
j > 1. In Exercise 10 we perform a rearrangement analogous to §8 to show convergence. 
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where d^, represents a fixed integer {actually some divisor of Ad) and a is any 
ideal in A selected to have a norm relatively prime to Id. {The definition of 
xp{X) is independent of a in A for these values of d^,.) 



Then, for ^{s, d;\p), a Type II function, we remove the factors p for 
which (A[p], Id) 1 and obtain 




(4/iV[p]) 




as we next separate the product into two of the three types of §7 above. 
For those p satisfying {djp) = — 1, A[(/?)] = p^. 



{la) 




and for those p satisfying pp' = (/;), {dip) = 1, N[p] = iV[p'] = p, 

(7ft) n2=n(i-^^r- 



We then see that the seemingly different types of factors can be unified as 



( 8 ) 





(dlp){dJp) Y^ 



according to the values {djp) = —1 and +1. But this expression is 
essentially the product of two L-series, the£-series for x^^K^) = {djn) and 
the Z-series for x^^K^) = (ddjn), each with the restriction {n,2d) = 1. 
Each are Type II, whence from (6) the ratio 



(9) d- rp)j[Lis, 

consists of only a finite product over p | Id, with nonzero limit as j ► 1. 
Thus, finally, for Type II, 



( 10 ) 



d\\p)--> (nonzero limit). 



(The reader can supply the details as Exercise 11 below.) Q.E.D. 

Although Weber’s theorem confirmed the significance of Type II series, 
after Dirichlet’s original proof various shorter proofs of Theorem 1 were 
developed to circumvent quadratic field theory. In fact, in retrospect, the 
use of quadratic fields seemed to be like “burning down a house to roast a 
pig.” More recently, however, mathematicians have come to regard the 
general connection between prime decomposition in fields and primes in 
arithmetic progression as very deep and certainly still not completely 
explored. It might suffice to note only that for d a discriminant the primes 
in a single arithmetic progression modulo c/[e.g.,/? = a (mod d){a, d) = 1], 
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There is an infinite number of such p, for instance, taken from each arith- 
metic progression dx a where a is chosen so that {dja) = — 1. We shall 
show an infinitude of primes p to exist in each class such that p | p and 
(dip) = 1. (This even strengthens the result for the principal class.) 

In the earlier proofs we considered (in effect) a set of (f>(d) characters x(«) 
defined for the <f>(d) residue classes n for which («, d) = 1. For this proof 
we introduce the characters ^(A) defined on the class group with h elements 
symbolized by A, There are h such characters, and the unit character ^i(A) 
is 1 for each A. If o e A, we extend the definition ip(a) = f(A). The 
multiplicative property of characters, of course, is y)(a)y)(h) = v^(ab). 

Then, analogously with (1) and (2), §10, we define the modified zeta 
function ; 

(1) ^(s, d; tp) =J,f(a)lN[ay =n (1 ~ V’(p)/WCp]*)■^ 

a p 

where the sum is over all nonzero ideals a and the product is over alt prime 
ideals p. Then, analogous with (3) and (6), §10, 

(2) log ^(s, d; ip) =2 V>(p)/^[p]* + finite error, 

P 

where ‘‘finite error” refers again to the limit Then, for A, a fixed 

ideal-class, we take sums over all h characters using orthogonality : 

(3) 2v“*(A) log C(s, d;y>)=h'2 l/JV[p]® + finite error. 

tp peA 

As before, we define the modified zeta-functions ^{.s, d; tp) of three types: 
Type I, for which \p = ^i(A) is the unit character. Type II, for which 
y) = y)(\) is real for all A, and Type III, for which y> has complex values for 
some A. The proof of the theorem then consists in showing that as .y — ^ 1 

(>s — 1) ^( 5 , d'.'ip^-^ (nonzero limit ), for Type I, 

l(s, d\ip)-> (nonzero limit), for Type II or III. 

We shall focus our attention on Type II, using an analogue of Dirichlet’s 
Lemma of Chapter II, §7, whose proof is deferred until Exercise 20 in §3, 
Chapter XIII. 

DIRICHLET-WEBER LEMMA 

The only real characters on the class structure group have the form given 
by the so-called generic (Jacobi) character 

(5) ^A)=(^ 




chapter XI 
Quadratic reciprocity 



1. Rational Use of Class Numbers 

Quadratic reciprocity will be familiar to the reader as probably one of 
the culminating theorems of elementary texts in number theory. The 
theorem was conjectured experimentally by Euler (1760) and “almost” 
proved several times. The first actual proof was given by Gauss about 
1796. Gauss indeed gave seven proofs, and by 1915 there were 56 proofs! 
Subsequently, at least a dozen more proofs were discovered. Obviously, 
there is something intrinsically appealing in such proofs to bring out new 
viewpoints so often. ^ 

We shall give an ideal-theoretic proof, which is a variant of one due to 
Kummer (1861) using quadratic forms. 

It is desirable to ask to what extent reciprocity has been invoked in 
ideal theory. First of all, we used reciprocity to show that x{n) = (ajn) is 
determined by n modulo f(a), the conductor. We also used reciprocity to 
evaluate some otherwise tiresome symbols (alb). We did not use recipro- 
city, however, to prove Theorem 1 in Chapter IX on the factorization of p 
in the field of V D, (whereD, as usual, is square-free). From this theorem 
we shall prove reciprocity now. 

Let us first note a result concerning forms and ideals, which indicates 
the role of class number in rational number theory, typified in this 
chapter. 

^ We follow the count made by Bachmann (see Special References by Chapter 
below). Included in his list is a proof by Cauchy related to heat conduction theory! 
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all factor or stay unfactored alike, as (dja) = 1 or (did) = — 1. It is this 
circumstance that ultimately guaranteed the occurrence of an infinitude of 
primes in arithmetic progression! 

EXERCISE 1 1 . Complete the proof of Theorem 4 by showing (a) the “finite 
error” statement is valid in (3), (b) the factors and JJ 2 ^re unified by (8), and 

(c) the ratio (9) has a nonzero limit as 5 -»■ 1 . Supply other details needed. 
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and conversely. The usual laws of cancellation are consistent, e.g., 

(3) 

if (5 7 ^ 0, as cross multiplication easily justifies. 



THEOREM 2. If N{e) = I for some unit e, then for some algebraic 
integer y, with conjugate y', 



(4) 



€ = L 



(5) 



Proof. We have only to let 

y = 1 + e if e ^ — 1, 



= V D if € = — 1. 



Q.E.D. 



COROLLARY. If a and ^ are algebraic integers such that N(a) = N(/5), 
then for some algebraic integer y 



The theorem (and corollary) are referred to as Hilberts’s Theorem 90 (of 
the famous Zahlbericht). They have an exalted place in the advanced 
theory, since condition (4) is trivially sufficient and very profoundly 
necessary for iV(e) = 1. The proof of the corollary is left as Exercise 4. 



THEOREM 3. If the discriminant d of a field is positive and has only one 
prime divisor, then the fundamental unit satisfies 

(7) N(^,) = -l. 

Proof. First of all, c/ = 8, for i?(V2), and prime values d = p ^ I 
(mod 4), for R(V p), are the only cases in the hypothesis. If N(rji) = +1, 
we could write (for integral y). 




by Theorem 2, We could also remove any rational common factor from 
either y or y', which we consider henceforth to have been done. Then, in 
ideal terminology, 

(9) (y) = (yO. 

This means that if q is a prime ideal dividing y then 

(10) q I (/). 
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THEOREM I. If the field of V D has class number h, then, whenever 
(d/p) = I for d the discriminant and p, an odd prime, 

m d/4=D# l(mod4) 

^ ^ |(x2 - Dy2)/4, d=D=\ (mod 4) 

has a solution in x and y relatively prime to p. 

Proof. If (dip) = 1, y; = pp' and N[p] = p. But (by the corollary to 
Theorem 6, Chapter VIII, §2) p^ = (tto), a principal ideal not divisible by 
p', hence not divisible by p. Thus ttq = x -f- Dy ox {x V Dy)j2 and 
we obtain (1) by taking norms: 

N[vf = N[(7 t,)] = |V(7ro)|. 

Furthermore, (x,p) = (y^p) = 1; otherwise, from (1), (x, y^p) = p and 
P 1 (tj-o)- Q.E.D. 

Note that if D < 0 then only the 4- sign (in the ± symbol) applies as 
^[(^o)] = A^(^o) > 0. 

EXERCISE 1. When - -20, Z) = -5, /? = 2. For (-20//?) = I and/? < 30, 
verify, by numerical work, 

p = {u,p) = {v,p) = 1 

in some cases; but, regardless of this, 

/’*=«*+ 52/* {x,p) = ( 2 /,jp) = 1 

in all cases. 

EXERCISE 2. Under what circumstances will a fixed k exist, X <k < hy such 
that whenever {dip) = 1 we can use instead of p^ in (1)? For example, if the 
class group is Z(p^) x Z(/?^) and a > b > 0, then h = /?‘*+^. What would be a 
suitable k(<h)l 

EXERCISE 3. Show that if h is odd and q \ D then (±plq) = 1, according to 
the sign in (1). 

2. Results on Units 

We have in the past used only algebraic integers in the field, i?(\/^), and 
never fractions. In this chapter only, we use fractions a//5 symbolically 
where a and f are algebraic integers such that f ^ 0. Then 



with ^ ^ 0, means precisely the result of “cross multiplication” 

( 2 ) ixd = ^y. 
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Incidentally, it is easy to recall the following [by reference to Chapter VI, 
§4]: 



THEOREM 5. The Pell equation, 

(17) x2-my2=-_|, or -4, 

has no solution in integers if m has a prime factor q = — I (mod 4). 

If m has only prime factors which are = I modulo 4 (or equal to 2), there 
is no decisive result. For example, from the fundamental units, 



I x2 — I0y2 = 

I x2 — 34y2 = 

f x2 - 65y2 = 

|x2-22ly2 = 



I is solvable (3, I), 
I is unsolvable, 

I is solvable (8. I). 
I is unsolvable. 



(10 =2-5). 
(34 =2*17), 
(65 =5- 13). 
(221 = 17- 13). 



Once more we can admire the unpredictability of algebraic number theory! 

EXERCISE 4. Prove the corollary to Theorem 2 (above). First try 

y = I + a//^. 

EXERCISE 5. Verify the unsolvability of = —1 and — 2212/2 = 

— 1 by making use of the units in Table III (appendix) and (15 + V 221)/2. 



3. Results on Class Structure 

THEOREM 6. If the discriminant of a field is positive or negative and 
contains only one prime factor, then the class number of the field is odd. 

Proof. We first note that if a group G is of even order it has an element 
A(^ I) such that = I. Otherwise, let us remove the identity I and pair 
off different elements of the group A, A~^; B, • • • until the group is 
exhausted. But this process yields an odd number of elements in G (hence 
a contradiction) unless for some A, A = A~^. 

If the class number of the field of Vd is even, there exists a class K for 
which 

(1) K ^ I, 

R2 = I. 

Now multiplying by = K', the conjugate 

(2) K = K' I. 

An ideal j (in K) exists such that 

( 3 ) 
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I (y)- 

Thus both q and q' divide (y). If q =7^ q', then, by ideal factorization, qq' = 
iq) divides (y), leading to a contradiction, and q = q'. But the only self- 
conjugate prime ideals are divisors of q for which {djq) = 0. Now, p 
or J = 8, hence p = q or 2 = q = p and, since p = (Vp)^ clearly 

(12) q = (V^) 

for any q that divide y. Thus either 

(13) y - e 

(which means no prime divides y) or 

(14) y = eVp, 

where e is a unit. In these two cases, if N{e) = ±1, 

(13a) rji = y/y' = eje = 

(136) rjy^ = y/y' = cV pK—eV p) = 

In neither case is rji a fundamental unit. Hence by contradiction, 

Ar(tji)=-1. O.E.D. 

To see a corresponding result stated independently of algebraic number 
theory, consider the following : 



THEOREM 4. If p = I (mod 4) Is a positive prime, then the equation 

(14) — py2 = — 1 



has a solution in Integers x, y. 

Proof, As a direct consequence of Theorem 3, equation 



(15) 




= -1 



has a solution in integers m, v, where u = v (mod 2). In fact, 

(u 4- vV p)j2. We next recall that by Exercise 19, Chapter VI, §9, = 1 

(mod 2) and, consequently, 

(16) = X + yVp, 

where x and y are necessarily integers but N{ri^) = — 1. 



Q.E.D. 
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Reducing by rational factors, we see the ideal factors of a or a' divide the 
discriminant pq (= 1 mod 4). Therefore (a) can be only 

(12a) (a) = (1), hence a = jy. 

(I2b) (a) = p, 

(12c) (a) = q, _ 

(12<f) (a) = pq, hence ol = r]V pq. 

where r; is a unit (and, incidentally, pq = (V pq), regardless of whether 

p and q are principal). Now, under hypothesis (12a), 




and, under hypothesis (12(f), similarly, 

a V i-^pq 

whence rji is not fundamental. This leaves hypothesis (12^) or (12c), 
where p or q appears as principal. Since pq ^ 1 both p and q are principal. 

Q.E.D. 

In terms of forms, if 




by taking norms we see 




Clearly, x = pX; hence, in new notation, we obtain the following 
result: 

COROLLARY. If p = 9 = — I (mod 4) for distinct positive primes p, 9 , 
equation 

(13) ±4==pX2~9r 

Is solvable In X and Y for some choice of sign. (We shall later see that both 
the -h and — signs cannot be admissible for a given p and 9 .) 

EXERCISE 6, An ambiguous ideal is defined as an ideal a for which a = a', 
whereas no rational integer (except ±1) divides a. An ambiguous ideal-class is 
defined as a class K for which K == K'. Re-examining Theorem 6, show that a 
real field R{^ D) can have an ambiguous ideal-class containing no ambiguous 
ideal only if the fundamental unit of the field has positive norm. (Observe that, 
equivalently ~ (1), = I.) 
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We cannot conclude j = j', as examples will indicate later on. At best, 
we see 

(4) a} = ^j'. 

Thus iV[(a)j = since A^[j] = and 

(5) A-(a) = ±N(fi). 

If N(ol) = N(^), it follows from the Corollary to Theorem 2, for some 
integer y, 



Multiplying (4) by y' on both sides and using ay' = ^y\ we see that ^ 
cancels and 

(7) y\ = y'i', 

or, if yj = f, 

(8) I = r. 

If, however, N(oc) = — iV(^), we rewrite (4) as 



(9) aj = 

where N(rj) = — 1 by Theorem 2, and the same result (8) follows. 

We now consider the ideal factors of ! and f'. As before, we eliminate 
rational factors and find that only ramified primes remain. Thus 

(10) f = (l) or (Vp), 

and ! G I, contradicting condition (1). Q.E.D. 



THEOREM 7. For two different positive primes p = q = — I (mod 4) 
the field R{V pq) has the property that the factors p, q of (p) = p^ (q) = 

are principal. 

Proof. By Theorem 5 the fundamental unit of P(V pq) or r}^ has N{r]^ = 
+ 1. Thus 

a 



( 11 ) 

by Theorem 2 and 
( 12 ) 



(a) = (a'). 
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THEOREM 8. If p is an odd prime, 



(4) x2 = — I (mod p) 
is solvable in x precisely when 

(5) /> s + I (mod 4). 



[This constitutes (!).] 

Proof. If we review Theorem 1 in Chapter IX, we find, without help of 
any reciprocity theorem, that (4) is solvable precisely when we have 

(6) ip) = pp' in 



Thus the solvability of (4) is interchangeable with that of (6). 

We now assume /? = 1 (mod 4). Then, since rW p) has a unit t]^ = 
(x + yV p)l2 of norm —1 (by Theorem 3, §2), it follows that 



and easily = —4 (mod p), whence x/2 (if x is even) or (x -f /?)/2 (if x is 
odd) satisfies condition (4). 

Conversely, if x^ = —I (mod p) or, equivalently, p = pp', then, since 
the class number is unity, in R(\/ — 1) 

(8) p = N{p) = + y\ 

whence it is clear, taking cases modulo 4, that p = \. Q.E.D. 



THEOREM 9. If p is an odd prime, 

(9) = 2 (mod p) 
is solvable in x if and only if 

(10) p = ± I (mod 8). 

[This constitutes (2).] 

Proof This theorem is somewhat more involved. First of all, by 
reviewing Theorem 1 of Chapter IX, §1, we see that this time (10) is 
precisely the condition that 

2 = tt' in R(V p*), 

where /?*=/? if /? = 1 (mod 4) and p* — — /? if p = —I (mod 4). Note 
(10) is equivalent to /?* = 1 (mod 8). 
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EXERCISE 7. Observe that for R(V34) the jdeals 3i = (3, 1 + V 34 ), 3g = 
(3, 1 — V 34 ) satisfy the relation 3^^ — (5 — V 34), whereas for no integer a can 
one have 3^a = 32«'; since then (a(5 — V 34)) = (3a') leading to a contradiction 
when we recall N(r}j) = +1 for R(v^34). 

EXERCISE 8. Generalizing the preceding exercise, show that if /> = 
and A^(^?i) = +1 in R(Vx)) then an ambiguous ideal-class exists which contains 
no ambiguous ideals. Hint. If a = (a, ^ -h D) for odd a, show that aa' = (a), 
whereas = (b + V D). 

EXERCISE 9. Show that only at most one ideal-class can be ambiguous 
without possessing an ambiguous ideal. Hint. If a a' and b ^ b', then either 
0 or b or ab is an ambiguous ideal ignoring rational factors (see Theorem 6). 

EXERCISE 10. Show if a field of discriminant d > 0 possesses an ideal-class 
without ambiguous ideal then no prime divisor of is = — 1 (mod 4), whence 
d == 4* (by Chapter IX, §5). Hint. From the relation A^(a) = —N{p) in the 

proof of Theorem 6, deduce the solvability in I of N(^) = —m^. 

EXERCISE 1 1 . Show that the only ambiguous ideals are the unit ideal and those 
whose prime ideal factors divide the discriminant. Hint. Compare Theorem 7. 

EXERCISE 12. Find the y, for which = yjy' in accordance with Theorem 2^ 
for the fundamental units of R(V21) and R(V34). Note the relationship with 
Theorem 7 and with Exercise 7 (above). 

EXERCISE 13. Show that the only ambiguous principal ideals can be (1), 
(V D\ (y), and (y V D) (possibly divided by a rational number), where D is the 
square-free generator of the field and y refers to Exercise 12 when D > 0 and 
iV(??i) = +1. Hint. First show that when D < —3, (a) = (a') only when 
a — ±a', whence a or a/ Vd is rational (the cases i> = — 1 and —3 being 
trivial). Next take the case Z> > 0 and A^(??i) = -1-1. If a == set p = a/y*, 
whereas if a = set p = (xKyW D), and note p — p'. Finally, if i> > 0 and 

^(^ 1 ) = “1, then on the assumption that a = ±oi'r]^^ show that t is even and 
specify under which conditions a/i ?</2 qj- ccl(rj^/^V £>) is rational. 

4. Quadratic Reciprocity Preliminaries 

The quadratic reciprocity theorem consists of three statements: 

(1) (_l/^) = (_l)(l>-l)/2 

(2) (2/p) = 

(3) 

where p, q are different odd positive primes. The third statement is, 
understandably, called the “main” result, whereas the first two are called 
“completion” theorems. 

It would be wise to dispose of the completion theorems first, particularly 
since (1) is needed as a tool in the proof of the main theorem. 
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THEOREM 10. If (r^/rj = I, then (rjr) =1. ^ 

Proof. From the hypothesis we can factor in R(V r*), setting = 
XiXi. Now, R(V r*) has odd class number h (and the fundamental unit rji 
of norm — 1 if r* > 0). Hence, by the method of Theorem 1, (above), 

(3) xf' — (co) for (D = (x + yVr^)j2; 
and taking norms, we find 

(4) = +iV(co), 

the sign of the norm being taken into account by using {rjo)) instead of (a>). 
Then 

(5) 4ri^ = — yh* = (mod r), 



and, since h is odd, then (r^/r) = 1. Q.E.D. 

COROLLARY I. If (p/rj = I, then (r^/p) = I. 

Proof. Let r = p = r* in Theorem 10. Q.E.D. 

COROLLARY 1. If (r/p) = I, then (p/r) = I. 

Proof. Letting p = we see {rjp) = {r*jp) = 1, as (—l/p) = 1. Thus 
by Theorem 10, (p/r) = 1. Q.E.D. 



Thus statement (1) follows, as the Legendre symbols here have only two 
values + 1 and — 1 (not zero). 

THEOREM 11. If (q/qi) = I, then (q^/q) = — L and conversely. 

Proof. From Theorem 7 at least one of the two equations 

( 6 ) ±4^qX^-q^Y^ 

is solvable. If the sign is +, then 4 = qX^{modq-^ and {qlq^ = +1, 
whereas 4 = —q^Y^imodq) and (— q^i/q) = — (^i/?) = +k Likewise if 
the sign is — , then (qilq) = +1, whereas (qlqi) = — 1. Q.E.D. 

Thus, among other things, only one sign permits a solution of (6). 

6. Kronecker’s Symbol Reappraised 

The intimate connection between reciprocity and ideal factorization 
theorems had led Kronecker to define quadratic character in accord with 
the ideal- theoretic versions of the completion theorems. In Chapter II 
we saw Kronecker’s symbol grow as a “step-by-step” expediency. Now, we 
start anew by letting d be a, discriminant (i.e., d square-free and d=\ 
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Now assume (10) or, equivalently,/?* = 1 (mod 8). Then, since i?(V/?*) 
has an odd class number = (o is principal, or, as in Theorem 1 (above), 
since A^[t] = 2, 

(11) 2*=±iV((o), 

the sign can be taken as +, for the fundamental unit having norm — 1 
can multiply a>, yielding +2^ = N{yi^(jS) otherwise. At any rate, 

(12) = /,odd, 

4 

whence, eventually, we see (9) is solvable modulo /?* or modulo p. 
Conversely, assume that (9) is solvable modulo p. Then 

(13) {p) = vv' in R{V2), 

where p = (p,x + Vl) = (« + vVl), since R(V2) has only the principal 
class, or 

(14) ±p = N{u + vVl) = — 2v^. 

Once more we check cases modulo 8 and find that /? = ±1. Q.E.D. 

On considering the last two proofs carefully, we note that the field 
it(\/^) or R{V 2) was used to prove the result “in one direction” and 
R{V}) or R(V p*) “in the other.” Although Euler’s criterion and Gauss’s 
criterion in elementary number theory may seem easier, these proofs are 
much more meaningful. 

5. The Main Theorem 

For this section we specify our notation with the following positive 
integers : 

r, = any odd primes, 

p = any odd prime = 1 (mod 4), 
q, qi = any odd primes = — 1 (mod 4). 

Once more we let r* = ±r = 1 (mod 4). Thus p* = p; q^ = --q. We 
must show 

0) (rip) = (pir), 

(2) (?/?i) = -iqM 



This includes all cases in (3) in §4. 
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Quadratic forms and ideals 



1. The Problem of Distinguishing between Conjugates 

We note that at many vital junctures in ideal theory we had to return to 
the corresponding forms to obtain quantitative results. For instance, we 
did so in the theory of units (Chapter VI), Minkowski’s theorem (Chapter 
VIII), the class number formula (Chapter X), and reciprocity (Chapter XI). 

Actually, we were presenting to the reader a truly historical view of the 
subject, for many of these impressive results were deduced from the theory 
of forms (and they preceded ideal theory by at least 50 years). Yet ideal 
theory is conceptually simpler. 

Our first problem is to return to the naive approach of Chapter III, 
§§1 and 2, and derive an exact correspondence between ideals of and 
certain forms. This is not so easy as these portions of Chapter III may lead 
us to believe. We must engage in a seemingly lengthy preparation, because, 
acting in haste we might think that an ideal and its conjugate correspond 
to the same form. For example, using module bases for the ideals j = [a, p\ 
and f = [a', ^'] we obtain the same form each time 

+ ^y) = 7V(a'a: + = (ax + f^y){cLX + ^'y) 

= + Bxy + Cy^. 

If we could not distinguish j from j' then, since jf ~ (1), it would follow 
that = I for J the class of j, contradicting class structure, generally. 

The precautions needed are quite deep and lead to a re-examination of 
the notion of equivalence. 
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modulo 4 or djA ^ 1 modulo 4, whereas djA is square free.) For any prime 
p, odd or even, we define (by Theorem 1 of Chapter IX) 

1 if ip) = pipi, in Riy'd), 

(dip) = ^ — 1 if (^) does not factor, 

0 if (p) = p^\ 

We can then define (din) by the multiplicative law (dja){dlb) = (djab), 
using the unique factorization of n. We call (c//— «) = (din). This symbol 
is consistent with that of Chapter II. 

Indeed in some fields of higher degree than 2, the (seemingly forbidding) 
analogue of Theorem 1 of Chapter IX is easier than the analogue of 
the reciprocity theorems. 

For later purposes in Chapter XIII, §3 Exercises 6 to 13 on ambiguous 
ideals and classes will indicate an even deeper role of concepts introduced 
here for quadratic reciprocity. 
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and the operation of taking conjugates has the (rational) counterpart of 
changing order of elements. 

3. Strictly Equivalent Ideals 

Once we consider an ordered basis, we must revise our whole notion of 
equivalence. For instance, if /> is an integer in not zero, 

U\ = p[oiJ] = [pcc,pp]iiN{p)>Q 

1 =[pfi,pa]]iNip)<0, 

since we find by direct substitution into determinants, as in §2, (2), 

ipa.)(pfiy - (/>/?)(/>«)' = N(p)(a.^ - ^a'). 

We therefore find it wise to use the following definitions: Two ideals } 
and f are said to be strictly equivalent if they are equivalent in such a 
manner that 

(2) Pi - a!, 

where N{pa) > 0. We write this \ !. 

Now, there could be, at the same time, other equivalence relations for 
which N(p*a*) < 0, which we ignore in favor of (2), (Incidentally the 
transitivity, symmetry, and reflexivity all carry over very easily from 
equivalence, as defined in Chapter VIII, §2). 

THEOREM 2. Two ideals are strictly equivalent if they are equivalent, 
in the ordinary sense, in a field for which 

(a) D < 0 or 

(b) D > 0 while the fundamental unit has negative norm. 

In the remaining case in which 

w D > 0 while the fundamental unit has positive norm, if j !(ordinary 
equivalence), either j f or VOj f, not both (in the sense of strict 
equivalence). 

Proof. The statements in case {a) are obvious, since the norms are 
always positive. 

In case D > 0 let be the fundamental unit. If N{r}^ = — 1, it is easy 
to guarantee j ! in statement (2) by using prjf\ = erf instead of (2), when 
N{pa) < 0 (since NipYj-^o) > 0). This takes care of statement (Z>). 

To take care of statement (c), we note that if j ^ !, whereas j 4^ f, it 
mu^t follow that pj = a! and N{pa) < 0. We then set V Dl = f*, and it 
follows that V Dpi = a!*, whereas N{paV D) = N{po) N{V D) = 
— DN(pa) > 0. Thus, if j ^ ! and j ^ f then j V Df. 
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2. The Ordered Bases of an Ideal 



We first consider the ideal j in for R{\'d) with a module basis 
(1) i = [a, P\ = {r« + y^}. 



i.e., the set of all olx -f- where a, ft are fixed elements in and x and y 
are variable rational integers. We have in the past drawn no essential 
distinction between [a, ft] and [ft, a]. We must now consider each two- 



element basis to be ordered by the condition that the ratio of A/V d be 
positive, or, 



( 2 ) 



^ ^ _1_ a ft 
a' 






We saw in Chapter IV, §10, that ±AjVd = A^[j] > 0. If (a/3' — ^a.')l\/~d 
< 0, then the ordering [/3, a] instead (with the substitution of a for /3, and 
conversely) will produce a positive ratio in (2). Thus, instead of saying 



|a^' - ^a'l = iV[j] Wd\ 



for A^(j), the norm, we say, more strongly, 

(3) a/3' - /3a' = N\\Wd. 

Thus we consider a change of basis. If the bases are ordered, then 

(4) [a, ft] = [y, (3] 
if and only if 

fa=-Py+S<5, 

1/3 = + Sd, 

where P, Q, R, S determine a strictly unimodular transformation, i.e., 
(6) P5-e^=-hl. 

Comparing the result with that of Chapter IV, §7, we see that (6) has 
4-1 (not ±1). We need note only for proof that 



a ft 




P 


Q 


7 


d 


a' ft' 




R 


s 


y' 


d’ 



THEOREM 1. Two ordered bases of an ideal are equivalent under a 
strictly unimodular transformation, and conversely. 

From now on all bases are imagined to be ordered. Thus, from (1), 

(8) i' = [/3', a'] = {//a' + */3'} 
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[Sec. 4] EQUIVALENCE CLASSES OF QUADRATIC FORMS 

If forms Q(x,y) and Q*(x*,y*) are related by (2) and (3) for some 
transformation with determinant ps — qr = 1, the forms are said to be 
properly equivalent and written Q ^ If the forms have a relationship 
in which ps qr = —I, then (whether or not they have a relationship 
where ps -- qr = +1) they are called improperly equivalent and written 

G-e*. 

Unless otherwise stated, equivalence (of forms) means proper equivalence. 
An equivalence class of forms is denoted by symbols Q, Qi, etc., analo- 
gously with ideal classes. 

Now the transformations of type (2), for which ps — qr := 1, are 
transitive, symmetric, and reflexive from elementary properties of deter- 
minants. Thus properly equivalent forms form an “equivalence class” in 
the usual sense. So do the improperly equivalent forms, (although this 
latter class is of no direct use in the text). 

Therefore, trivially, 

Q(x, y) ~ Q{y, x) Q{—x, y) ~ Q{y, — x) ~ Q{—x, —y) 

~ Q{x, -y) ~ Qi,-y, x) ~ Q{-y, -x), 

Q(x, y) Qiy, -x) ^ Q(-y, x) ^ Q(-x, -y), 

whereas a relationship of the type 

Q{x, y) ^ Q{y, x), or Q{x, y) ^ Q(x, -y) etc., 

Q(x, y) — Q(x, y), or even Q(x, y)^ - Q(x, y), etc., 

can easily to be nontrivial, if it occurs. 

We define the conjugate of Q(x, y) as 

G(^. -y) = y) 

and the negative as — Q{x^ y). 

One should note also that in (4) 

(6) L* - Q{p, r). 

Such an expression as (6), in which (/?, r) = 1, is called a proper representa- 
tion of L* by the form Q{x^ y). Gauss first noted the following theorem in 
1796. 

THEOREM 4. Every proper representation of an integer L* by a form 
leads to a properly equivalent form with leading coefficient equal to the 
integer L*. 

Proof. In (6) we need only find q and s such that ps — qr \ (which is 
possible if and only if (/?, r) = 1). Q.E.D. 
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We need now verify only that ( 1 ) ^ (V D), when N(t]i) > 0, to see 
f* ^ t For, if ( 1 ) (V £)), then p(l) = a(V D), which means, for some 
unit pr}^ = (tV D, whereas N{pa) > 0. But = N{a\^ Z)), 

whence, N{r(^)N{p) = —DN{a). Hence N{ri^) < 0 if (1) ^ (V /)). Q.E.D. 

We defined /7+(^/) as the number of strict equivalence classes of R{\/ D) 
with discriminant d. We find on comparison with h{d) the number of 
ordinary equivalence classes: 

THEOREM 3 

I h(d) = h^(d), if D < 0, or if D > 0 and N(y,) < 0, 

U(d) = if D > 0 and > 0. 

4. Equivalence Classes of Quadratic Forms 

We now shift our attention to changes of basis in quadratic forms. Let 
us denote a quadratic form as follows : 

(1) Q(x, 7/) = Lx^ + Mxy + 

where L, Af, N are called the first (or leading), second (or middle), and 
third (or last) coefficient, respectively. Here we assume that D = — 

4LN (the discriminant) is not a perfect square. It need not yet be square- 
free. We consider the change of variables with integral coefficients 
p, q, r,s\ 

^ = px^ + qy*, 

[y = rx* -h .sy*. 

(determinant ps — qr ^ 0). We find 



(3) 


Q(x, y) = 


L{px* -{- ^y*)^ + M(px* + qy"^){rx* 


+ sy*) 








+ N(rx"^ -h sy*y 






= 


L*x*^ + M*x*y* + N*y*^ = Q*(x 


*, y*). 


where 














' L* = 


Lp^ + Mpr -f Nr^, 




(4) 




M* = 


2Lpq + Mips + qr) -j- Nrs, 








N* = 


Lq^ -f- Mqs + Ns"^, 




It is easy to see, by 


dint of 


a lengthy calculation, that 




(5a) 


D* = 


M*^ - 


4L*N* = (ps - qrfCM"^ - ALN) 


(5b) 






/)* == ips — qr^D. 





Thus the discriminant remains unaltered exactly when ps ~ qr ±1. 
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[Sec. 5] THE CORRESPONDENCE PROCEDURE 



has integral coefficients and is a primitive form of discriminant d. (Note. 
N[j], as an ideal norm, is always positive, while N(ax + as the product 
of conjugates, could be negative.) 

Proof. We expand 

(2) N{(xx + ^y) = (cLX 4- + f'y) = Ax^ + Bxy + 



where the coefficients belong to jj'. We write 

= aa^ = aNWl 



( 3 ) 



5 = a/S' + a'/5 = Z?iV[j], 
C = - cN[W, 



since (JV[j]) = jj' contains (hence divides) A, B, and C, the coefficients of 
Q(Xy y) are integers. Furthermore, 

(4) = (B^ - 4AC)IN^l\] 

= (a^' ^ = c/, 



where d is the field discriminant (see Chapter IV, §10). 

Now the field discriminant has no square divisor except possibly 4, 
hence the only possible common divisor of a, b, c is 2, when d = AD and 
D ^ 1 (mod 4). To exclude this, note that [a, p\ = (a, f) by Chapter VII 
Theorem 5, §4. If we write (2) = F (as must happen when 4 | d and the 
Kronecker symbol (^//2) = 0, then 

(a) = t“a, A = V(a) = 2“ • odd number, 

(^) = t^b, C = N(^) = 2^ • odd number, 

j = t^lx, A^(j) = 2^ • odd number. 



where w = min (w, i?) and ideals a, b, h are prime to t by Theorem 15 of 
Chapter VII, §9. Thus by (3) a or c is odd. Q.E.D. 



The form defined by (1) is said to belong to the ideal \ with basis [a, 
written 



Q - e[a, = Q(\\ 

i = [a, - G “i leads to G-” 



LEMMA 2. Suppose we are given a quadratic form, not necessarily 
primitive, which we write as 

Q(x, y) = Ax^ + Bxy -f Cy^ 

= t(ax^ + bxy + cy^), 

where ±t is the greatest common divisor of A, 6, C. We let t > 0 if 6^ — 
4AC > 0, but if — 4AC < 0 we choose t so that o > 0. We call d = 
— 4oc, and we suppose that d is the field discriminant for R(V d), i.e., 
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Thus the study of proper representations somehow leads to the study of 
equivalent forms. 

THEOREM 5. If two forms Q^(x, y) and Qg(x, y) have the same discrimin- 
ant D and represent the same prime p, then either Qi(x, y) Q2(x.y) 
or [Qi'(x, y) =] Qi(x, -y) Q^(x ,y). 

Proof, By Theorem 4, we can find forms and such that 



(7) 


Qi y) = + biXy + Ci^/^ 


0= 1,2). 


Then 






(8) 


D = bi — ApCi = — 


Apc^. 



Taking p to be odd, (mod p)\ thus = -^b^ (mod p) and b^ and 

^2 are both odd or both even. Therefore, b^ = + 2hp. If we write 

Q^*(x + hy, ±y) = y\ then Q^*{x, y) = Q<f^{x, y) identically. 

(The first and second coefficients match, whereas the third coefficients 
are determined by the discriminant.) 

Exercise 3 (below) covers = 2. Q.E.D. 

EXERCISE L Prove {5b) by writing ALQ{x, y) - N{^x + ly), where ^ = 2T, 
^ = M + V Z), and using transformation (2). Note = (1C — {10^- 

EXERCISE 2. Using (3) in Chapter VI, §9, show that the forms - 2?/^ 
—x^ + ly'^ are properly equivalent. Show that they are also properly equivalent 
to y^ — 2x^, — 2/^ + 2x^. 

EXERCISE 3. With /? — 2 in (8), show how to choose the sign so that b-^ = ±62 
(mod 4). 

EXERCISE 4. Show that Q{x, y) == - 3^^ is not properly or improperly 

equivalent to — g(x, y). Note (6). 

EXERCISE 5. Show that equivalent forms provide representations of the same 
integers. Show that this statement also holds for proper representations. 

5. The Correspondence Procedure 

We now set up a precise correspondence between forms and ideals. We 
first introduce two definitions : 

The ideal j is called primitive when it is not divisible by any rational 
ideal except (1). 

The quadratic form Q is called primitive when its coefficients are not all 
divisible by any rational integer except ± 1 . 

LEMMA I. If j = [a, /?] is an (ordered) ideal in the field R(V d) of dis- 
criminant d, the form 

(I) Q(x, y) = N(ax + i^y)/N[j] = ax^ + bxy + cy^ 
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Starting with the form Q[<x, we obtain the (generally different) ideal j* 
with ordered basis by Lemma 2 ; 



(9) r = = 



N(g) + Poi' 
.N[j]’ 2NU] 
' N(g) OL^' + jgg^ 
-N[i]’ 2N[i] 



Vd 

T- 

Vd 

T. 



if d < 0 or 
’ d > 0, iV(g) > 0, 

7d, ifd>0, N(g)<0. 



Recall, of course, that JV[j] > 0, whereas A^(g) can be < 0 (when d > 0). 
We can easily verify that 

(10) iV[j][g*,n = [^,/^]y, 

(a if N(ol) > 0 and d > 0, or if d < 0 
where y = I 

[oi'Vd if iV(g) <0 and d > 0. 

Thus N(y) > 0 always. Actually, (10) is correct, basis element by basis 
element. It is easy to see 7V[j]g* = gy, whereas the statement about the 
second basis element follows from the ordering of the basis of j, namely, 

a/?' - = VdN[\]. 

We see by transposition that 

+ fa' Vd iVQ] ^ 

whence follows N[\]^* == ^y. 

Thus, if we have 

( 11 ) e-i-e*, 

then 2=2* (the same form) (if we exclude d < 0, a < 0). If we set up 

(12) i-2-i*, 

the best we can expect is an equivalence (rather than an equality) : 

(13) j* ^ j. 

EXERCISE 6. Show that if a quadratic form is primitive all forms in their 
proper (or improper) equivalence classes are primitive. 

EXERCISE 7. Start with Q = —x^ + Ixy — lij^ and construct the corre- 
sponding j; from it construct 2*(= ^2) [see (11)]. 

EXERCISE 8. Start with j = [V'— 6, 2] and construct the corresponding Q; 
from it construct j*. How does j* compare with j? 

EXERCISE 9. Follow Exercise 7 using Q = —26x"^ -I- 2xy + 3^/^ to form 

G*(= 0. 
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d = I (mod 4) for d square-free or d = 0 (mod 4) for d/4, a square-free 
integer ^ I (mod 4). Then the Ideal 

-^r (i> - “>0. anyd. 

'' l[o, (b - Vd)j2]Vd, a <0. d > 0. 



is integral and has an ordered basis; j is primitive when <3 > 0, whereas 
j/Vd is primitive when a < 0. (Note that the lemma excludes the case in 
which 0 < 0, d < 0,) 

Proof. First we notice that if d = 1 (mod 4) the basis elements of j are 
integers, since b is odd, and if d = 0 (mod 4) the same is true, since b is 
even. Next, using (2) in §2, we see that A/Vd > 0. In fact, assuming 
d > 0 (which is the difficult case), we find that A = ^Vd, if a > 0, and 
A = a(—d)Vd, if < 0; hence the basis is ordered. 

To see that j (or j/V d) is primitive, we note that otherwise a rational 
integer u > 1 exists which divides a and ^ = (b — Vd)/2. This integer 
then divides so that u divides = —Vd or divides d, which, 

by assumption, limits u to the value 2, when d = 0 (mod 4). But, even 
then, if d = 0 (mod 4) b as well as a must be even. Thus, in order that 
2 divide /9, Vd/2 must be divisible by 2 (see Chapter III, §7) but 4 does 

not divide Vd, by nature of the field discriminant ; (d/4 is square-free). 

Q.E.D. 

If 2 is a quadratic form with coefficients A, B, C satisfying the dis- 
criminant properties of Lemma 2, we write 



, [a, /^] = i = i(A, B, C) = i(0, 

( 8 ) 

i“G leads to j,” 

where j is the ideal determined by the form Q, with basis as shown in (7). 

To summarize, lot us first start with a primitive form Q = ax^ bxy + cy’^ 
whose discriminant d — b^ — Aac is a field discriminant and for which 
a > 0, We construct the ideal i(a, c) with ordered basis according to 
Lemma 2 (above). Starting with this ideal j, with its ordered basis, we 
reconstruct a quadratic form g*(a, ^) according to Lemma 1. Then, 
merely reversing the steps, we see G* = Q. This is the easy part. 

Let us next start "^^th a primitive ideal with ordered basis j = [a, P\. We 
construct from it the quadratic form Q[cl, P\ according to Lemma 1, 



G [a, 



Nicf^x"^ 4- (a^5' + ^yJ)xy + N{P)y^ 

W] 
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But Qi(x, y) = y) “numerically” and identically under transforma- 

tion (4). The locus of points where Qi(x, 2 /) = 0 must transform into the 
locus where Thus either 



( 5 ) 



y 01.1 Y c^2 



must coincide under (4) or 

(6) .nd 

y Y aa 

must coincide under (4). 

First try (5). Then 

(7) = p^ + ^y ^ + g pi-N«-i) + q 

aa y rx + sy r{xjy) + s + s 

= -Pft + 

— r/?i + sai 

Hence, from the two “outside” terms, 

^2 ^ - (say) 

saj - r/?i -^ai + pfii fi 
j“«2 = (—'■/?! + SXj)X, 

M^2 = (/’/?!- 

We can assume, as we have often done before, that N(jbi) > 0. When 
N(y) < 0 (necessarily), d > 0, whence y can be replaced by yV d of norm 
—dN(y). Next 

( 9 ) y']2 = [y«-2, 

But, since ps — qr = + 1 , 

(10) y\2 = [laj, A^i], 

and since both = [aj, /dj and jg = [aj, jda] are ordered, as well as y'l^, 
then JV(A) > 0 by (1), §3, and. 



( 8 ) 



( 11 ) 



Ml2 = ■^ii or ii h- 



Next we see alternative (6) is intrinsically impossible. Retracing our 
steps from (6) we obtain, instead of (8), the following; 



( 12 ) 



ya.2 = i—r^i + J'ai')^, 
= (P^i - 
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EXERCISE 10. Follow Exercise 8, using j = [1 + V?9, 3] and once more 
compare j* with j. 

(In these closely related exercises, observe the sign of the xy term and the 
radical very carefully.) 

EXERCISE 11. Let j' be the conjugate of j. Then show that if j = [a, p\ then 
j' = a'], keeping an ordered basis, and, if Q(j) = ax^ + bxy + cy^, then 

show Q(Y) = cx^ + bxy + ^ Q'i\) ” bxy + cy"^, 

EXERCISE 12. If ii - for N(X) > 0, show that Q(\Y) = G(l 2 ) for some set of 
variables x, y\ whereas, if ii == for bl{l) < 0, then 2(ii) — CXi 2 )- 

EXERCISE 13. Show that == + xy ty^ ^ O 2 = = Q\ 

by a change of variables. Show directly that they lead to the same ideal. (Assume 
1 — 4/ = ^/, a field discriminant.) 

6. The Correspondence Theorem 

We see that the relation (12) of §5 forces us to construct a correspon- 
dence on a broader level. 

THEOREM 6. If two forms with discriminant equal to afield discriminant, 
Qj and Qg, satisfy 

(1) Qi ^ Q2 
and ^ jj, Qg -> jj (by Lemma 2, §5), then 

(2) ii \ 2 - 

Conversely, if two ideals satisfy (2), then the forms and Qg found by 
Lemma I, §5, designated by ji -> Q, and Q^, have discriminants equal 
to a field discriminant and satisfy relation (I). 

Proof. First of all, when d <0, we can limit ourselves to forms 
Q.{x, y) — + bixy + c-y^, > 0, without weakening the theorem 

(for any of its applications). 

To prove the first part, let the properly equivalent forms Qx{x, y) and 
Q^{X, Y) be regenerated in turn by j(2i) and \{Q^, according to the chain 
in (11), §5. We wish to show \(Qx) \{Q^. 

Let i(2i) = ii = [«i, M KQz) = h = [aa. ^2l 

( Qi(^> y) — 

Y) = («2^ + ^2 Y){^iX + Y)IN[\2\, 



where for an integral transformation 

(4) X = px + qy, 

Y =rx + sy. 



ps — qr = 1. 
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by Lemma I or 2 of §5 (not necessarily the same each time), these two 
equivalences imply one another; 

(18) ^ ig, 

(19) Qx^Qa 

(as long as j(Q) is constructed only for forms Q which have discriminant d 
equal to a field discriminant and which have a positive leading coefficient 
if d < 0). 

THEOREM 8. If Q is a form with discriminant d equal to a positive field 
discriminant d, then 

Q(*.y) ^ y) if and only if N(?^i) = — I 

for rji the fundamental unit in R(Vd). 

Proof, Suppose N{r)i) == — 1. Let i = [a, lead to Q: 

i y) = iV(ax -h Py)jN[\l 

Nov/ \ = rji\ = remembering the order, and, since i\^(j) = 

Mrjii), 

N(rji(x,x - rj^MIN[rji\] = -Q(x, -y). 

Conversely, suppose Q ^ Then, if j ^ before, 

\Vd = [VdoL, -Vd^l N{Vdox - Vd§y)!NWd\] = - Q{x, - y). 

Then Vjj j or iVd) (1), whence A^(??i) = (compare the proof of 
Theorem 2). Q.E.D. 

7. Complete Set of Classes of Quadratic Forms 

To see how classes of quadratic forms come from ideal classes, let us 
take three typical cases, using the ideal classes^ in Table III (appendix): 

Case L d = —23. 

ii = (1) = [I, (1 - V-23)/2]; = + xy + 6y^ 

h = 2, = [2, (1 - V-^2]; = 2x=* + xy + 3/ 

h' is = 2a = [—2, (1 + V-23)/2]; = 2x^ — xy + 3/ Q^' 

Case II. d = A- 58, rj^ = 9^+ = - 1. 

ii = (1) = [1, -V58]; Qx = x^~ 58z/2 

= 2i = [2, -V58]; 02 = 2x2 - 29y->^ 

^ The ideals in Table III (appendix) are written as modules in accordance with 
Exercise 4 of Chapter VIII, §1 . The reader must sometimes order the basis, by adjusting 
the sign of the radical (for example). 
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Again, restricting N(fji) > 0 and going to the analogue of (10), 

(13) //jg = [/uag, W]- 

Now [a/, is not correctly ordered, but [Aaj', A/S/] is so ordered by the 
unimodular property (4). Thus, N(X) < 0. Now from (4) 

02(1,0)= 6i( 5, -r) 
or 

^) ^ iV(ai5 ^ M 

Since iV[j] > 0 (intrinsically), A^(ag) and N{—rP^ + 5aj') agree in sign and, 
from (12), so do N{ii) and iV(A), yielding a contradiction to alternative (6). 

To prove that the “converse” portion of Theorem 6 is easier. First let us 
verify that if j = [a^, ^i] — [ag, j^gl for I^o ordered bases, 0[ai, ^ 

0[a2, ^ 2 ] (formed under Lemma I, §5). For then 

ag = P^i + qPi, ps -qr = 1, 

^2 = 

Thus aga? + + ry) + j^i(^a:; H- ^y) and from §5 (1) 

02 (^, y) = Qi(p^ + ry, qx + sy) or 2 g[a 2 , /?g]. 

Finally, let h jg or p\i = aja, where A'(pcT) > 0. As usual, make 
N{p) > 0, N{o) > 0 (by the V d factor, if necessary). Then, since the basis 
of i affects Q only within an equivalence class, we verify that 

(16) p[ai, = a[a2, ^ 2 ], 

(17) 0K,A] = 0[a2,M 

operating on both sides of relation (16) according to Lemma 1, §5. 

Q.E.D. 

One remark might be in order here : the proof best indicates, in the 
rejection of alternative (6), how the ordered basis distinguishes the factors 
of y). An ordered basis therefore distinguishes an ideal from its 
conjugate. To maintain an ordered basis, we must use only strict or 
proper equivalence classes; hence the severity of this chapter! 

An equivalent form of Theorem 6 is the following: 




THEOREM 7. Under correspondence between and jp either by 
Lemma I or 2 of §5, and under correspondence between Qg and jg, either 
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[Sec. 8] SOME TYPICAL REPRESENTATION PROBLEMS 

COROLLARY. Let d be a field-discriminant and p be an odd prime for 
which (d/p) = I or 0. Then a quadratic form Q of discriminant d exists for 
which Q(x, y) = p is solvable, and, if d > 0, a form of discriminant d exists 
for which Q(x, /) = — p. 

Proof. Let p | p where iY[p] = p. Then, writing p = [/?, tt] by the 
corollary to Theorem 23, Chapter VII, §10, we have 

Q{x, y) = N{px + 7 ry)lNlv]; 

hence p = 2(1? 0). To complete the proof, note that y) is also a 

form of discriminant d. Regardless of whether —Q^ g, it follows that 
“G(l? 0) = p, trivially. Q.E.D. 

EXERCISE 14. Find the complete set of forms for D — —15, 15, 26, 34, using 
Table III (appendix). 

EXERCISE 15. Find the proper transformation of basis x = aX + bY, y ^ 
cX -h dY for which Q(x,y) = —Q(X, — Y) where Q(x,y) = — \0y^, = 

3 -H VlO, by justifying 

r/ji, - VTo] - = [3 + VIb, 10 + 3V10], 

{x ^ VTb?y) = (3 F Vlb)A^ F (10 F 3VTo)y, 

+ y=-X-3Y. 

EXERCISE 16. Assuming N(rj^) = — 1, find explicitly the transformation for 
which Q ^ —Q' for Q the principal form for a given d: 

j x^ + xy — [(d — l)/4]y\ d = 1 (mod 4), Vi — + bVd)l2, 

= I ^2 _ (rf/4)j,2, rf = 0 (mod 4), »)1 = a + 

EXERCISE 17. Find the smallest field discriminant (positive and negative) and 
the forms for which some g(a:, y) 4* Q'{^, 2/)- Hint, j 4 i' means p 4 ii' ^ 

EXERCISE 18. If a 2, then, for some {x, y), Q{x^ y) — A^[a]. Hint. Note Q 

takes the values V(a)/iV[o], where a e a. 

8. Some Typical Representation Problems 

These three sketchy examples will illustrate many possible situations. 
The reader will have many details to provide in any case. 

Problem I. Solve 2x^ 4 - xy + = 78. 

If a = 2a: + [(1 — V — 23)/2]^, then a e 2j, and by Lemma 1, §5 



( 1 ) 



V(a) = V[2il • 78 = 22 • 3 • 13, 

2i I («). 
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Case III. d = 4-19, rji ^80 + 9V79, N(rh) = + 1. 
ii = (1) = [1, -V79]; 

_ 01 = - 79/ 

U = 3i = [3, 1 - V79]; 

02 = 3x2 ^ 2xy — 26/ 

h' >=« is = 3a = [—3, 1 + V'"79]; 

Qs = 3x2 _ 2xy - 26/ Q 2 

j,* = h = [79, -VT9]; 

gj* = 79 o;2 — 2/2 

j/ = VT9 U = [79 - VT9, -3\/T9]; 

02* = — 2xy — 

(is*)' ^ is* = is = [79 + VTO, -3A/79]; 

03* = 26a;2 + 2xy - 3/ (02*)' 

Since 0(a:,y) ^ Q{y, -a:), we can write 0i* ^ -0i, 02* ^ “03» 
03* — 02 the last case.) 

In any case, 0^, the form belonging to = (1), is called principal. It 
takes the form — Dy’^ or x^ xy — {D — \)y^!A. 

THEOREM 9. Let Q(x, y) be a quadratic form whose discriminant is a 
field discriminant d. Let Q(x, y) properly represent m. Then if a prime p 
divides m, (d/p) = 0 or I. 

Proof. To simplify matters, note that 0 must be primitive and, for 
convenience, if d <Q, the leading coefficient can be made positive (by 
changing all signs if necessary). Now consider j(0), the ideal belonging to 
0. It is equivalent to an ideal a for which (a,/?) = (1) (by Theorem 7, 
Chapter VIII, §2), whence p f A^[a]. We can assume that the equivalence 
is strict (replacing a by a\^d if necessary). Then a ^ 0*, a form equi- 
valent to 0 (by Theorem 6 above). 

Now 0* will also represent m properly (by Exercise 5, §4), or y^ 

= m, where (x^, y^) = \, Then, writing a in basis form as [a, ^], we see by 

(1) 111 §5 ^ ^ 0*(xi, 2/j) = N{<xxi + ^yi)IN[a]. 

Thus, writing X — ax^ -j- ^y^, we see /? | m | N(X). 

If /? f A, then, by Theorem 23, Chapter VII, §10, (/?, X) is a prime ideal 
divisor of p distinct from /?, completing the proof (see Theorem 1, Chapter 
IX, §1). If, however, p | A, then p\X = ol'x^ -f ^'y^, p | — ^X) = 

XjA where A = (ol^' — ^oi),p | (— aA + a' A') = y^A, and (p) | (x^A, 
y^A) = (A). But, taking norms, /?^ [ A^ = N[a]d, by Chapter IV, §10. In 
this case, p | d and (d/p) = 0. Q.E.D. 
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[Sec. 8] SOME TYPICAL REPRESENTATION PROBLEMS 



then we must solve 

fN(oO = 10 = 2 • 5, 

(4) 

Ue(l). 

Now 2i = 2a =_[2, - Vio], 5^ = 5a = [5, - VT6]; (h = 2). Hence 
(a) = 2i5i = (VlO I), where N(i) = ± 1. We easily see that if a = Vl0<f 
then only iV(f) = — 1 is acceptable; thus, since r/i = 3 + VlO is the 
fundamental unit, we set i 

a = ±Vl0(3 + a/I 0)(19 + 6V'T0)^ /c = 0, ±1, ±2 

(where (3 + VlO)^ = 19 + 6 a/ 10 is the generator of all units of norm 
+1). If we set 

a = ±(x^ + V lOi/j), 

we obtain Xq = 10, = 3. We can form all other solutions by the recur- 

sion formula 



or if 
(5) 



(*^.+1 + VlOy,^,) = (r, + Vl0y,)(19 + eVlO) 

Xk+1 = \9x ^ /c = 0, ±1, ±2, • • • , 

1/jc+i = K + 

.(^01 yo ) = ( 10 , 3 ), 



then ±(^*, y*) generates the most general solution to the equation 

( 6 ) Xk^ - lOy^^ = 10 . 

EXERCISE 19. Solve 2x^ + 2xy + 3y^ = 2\ and = 42 by ideal factorization. 
EXERCISE 20. Show that for a properly chosen unit in Problem II we can have 
y = 0 (mod 3) so that 



p = Q*I4 - (X^ + 27y2)/4 if;? - 1 (mod 3) 

in precisely one way, ignoring changes of sign. Verify this by finding three 
different representations of ;? = 13 and ;? = 31 by Q(x,y)l4 and one by 
Q*(X, Y)/4 (ignoring changes of sign). 

EXERCISE 21. Referring to Exercise 20, can we always represent p = 1 (mod 3) 
by Q{x, y) (instead of Q(x, y)!4)l What about Q*{X, Y)1 
EXERCISE 22. Repeat the process for p = x^ -{• y^ and show how the multi- 
plicity of solutions is due to signs. If we set 5/? = + y^^ are the solutions 

trivially equivalent? 

EXERCISE 23. Solve x"^ — Z2y^ = 18. (Note that the paucity of solutions is 
related to the high class number 4.) Compare x^ — ly^ — 18. 

EXERCISE 24. For fixed positive square-free Z), under what conditions is the 
representation 8/? = -H Dy^ unique for p prime, assuming that such a repre- 
sentation is possible? (Consider whether /) is = —1 or ^ — 1 (mod 8).) 
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According to the class structure, h = 2^ and 2^ ^ 

32 ^ ^^2’ 

2i = [2, (1 - V^3)/2], 

3i = [3, (I -- V^3)/2], 

13i = [13, (9 - V^)/2]. 

(We just verify 2^3i = ((1 — V— 23)/2),2il3i = ((9 — V— 23)/2).) Hence 
the norm in (1) is satisfied by 

(a) = 2 i223i132 = (8 - 2V^), 

(2) \ (a) = 2i*13i3i = ((7 + 5V^3)/2), 

(a) = = (8 + lV^3). 

What we did was to consider all ideal factorizations of a e 2j whose 
norm is consistent with (1) knowing that the ideal structure serves as a 
limiting factor on the number of possible combinations producing a 
principal ideal. Note that with smaller class numbers like 1 there are 
more plausible combinations (2) yielding the norm. (This remark was 
essentially the basis of our computation of class number in Chapter X.) 

By comparison with a = 2a; 4* [(1 — V — 23)/2]2/, system (2) yields these 
solutions of Problem I: 

' (x, y) = ±(3, 4), 

(3) ±(3, -5), 

±(5, -4). 

The ± sign factor arises from the unit, i.e., (dba) = (a). 

Problem IL Let us discuss primes : /? = (x^ + 3y^)/4 = Q{x, y)/4. 

We write p = N{tt) in R{V —3) a field of class number 1. Thus either 
p = 3, or (Sip) = 1 and p = 1 (mod 3). But the associates of tt are also 
solutions; e.g., there are six units ±1 and ±(1 ± V — 3)/2 yielding the 
associates 

a: + 1 ± _ [(^ T 3y)/2] ± [(x ± y)/2]V=3 

2 2 ' 2 

Therefore, there are at least three representations of p by Q(x, y)j4, 
ignoring trivial changes in sign, such as Q{x, y) = Q(x, —y) = 
-y) - Q{-x, y). 

Problem III. Solve — \0y^ = +10. 

We note that if 



« = a: _ ^/\0y e [1, _ VlO] = (1). 
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[Sec. I] COMPOSITION OF FORMS 

the general theorem by a manipulative tour de force that probably has few 
equals in any branch of mathematics. He actually substituted and worked 
with coefficients (whereas now we can benefit by ideal theory). For 
convenience, we make a restriction which Gauss did not make, limiting our 
attention to forms arising from ideals in or equivalently, to forms with 
discriminant equal to the discriminant of a quadratic field. ^ 

We note first that the Theorem 1 permits us to use any convenient 
representative for the proper form-class and (strict) ideal-class in question. 
Then we make use of these four lemmas : 



LEMMA I. Numbers exist properly represented by an arbitrary quad- 
ratic form arising from an ideal in Dj, which are relatively prime to any 
preassigned integer. (For proof see Exercise I, below.) 



LEMMA 2. Every proper equivalence class of quadratic forms arising 
from ideals in contains a form Q(x, y) whose first coefficient o is positive 
and relatively prime to some preassigned integer N. 

Proof, The relative primeness follows from Lemma 1, using Theorem 4 
in Chapter XII, §4. Our only concern is that a be positive in Q(x, y) = 
ax^ + bxy + cy^. But, if ^/ < 0, there is no difficulty, since then each Q{\) 
necessarily has a > 0. If > 0, however, we can note that if x^ = bNt -F 1 
and y^ = —laNt then Q(xq, y^) a{[ — dt^N^), which is positive if 

a < 0. Furthermore, since (a, iV) = 1, likewise {Q{xq, JV) = 1, and 
Xq and y^ can be assumed relatively prime, (for example, if / = lab). 
We finally reapply Theorem 4 of Chapter XII, §4. Q.E.D. 



LEMMA 3. Every two classes of primitive quadratic forms arising from 
ideals in in a given field have forms with the same middle coefficient: 



..v |Qi(x, y) = 0 ix 2 + bxy + c^f. 

' ' (Q 2 (x. y) = OjX^ + bxy + c^y^, 

and the further conditions that (c^, = I, > 0, > 0. 

Proof We start with representatives of two classes: 

y) = A B^xy + 
l02(*- y) = A 2 X^ + B^xy + Ca*/*, 



Now we can imagine Qi(x, y) given first with /f^ > 0, so that A 2 could be 
chosen positive and prime to /fj by Lemma 2. Then we use two strictly 



^ We continue to exclude from consideration the negative definite quadratic forms 
(which cannot be generated by ideals). 




chapter 

** Compositions, orders, 
and genera 



1. Composition of Forms 

Nowadays, we can recognize that ideal theory is a natural tool for the 
solution of diophantic quadratic equations, as in Chapter XII, § 8 . Yet 
the intricate factorizations used here were accomplished by Gauss in the 
following fashion ( 1796 ), seventy-five years before ideal theory. 

THEOREM I. Let two ideals h and jg in correspond to quadratic 
forms Qi(x, y) and y) (with discriminant equal to a field discriminant) 
by Lemmas I or 2 in Chapter XII. Let us define 

(1) is = ii * h (ideal multiplication). 

Then, for a form Qg with the same discriminant, 

( 2 ) Qzixv Ys) = Qi(*i. Ki) Q2(^2. Y2) (ordinary multiplication). 

where Q3 = Q(i3) and the new variables are defined by special bilinear 
expressions in integral coefficients and 6^: 

1^3 = "b ^2^1X2 "b ^3^2/1 “b ^4^2X2* 

1X3 “ "b ^2^1X2 "b ^3^2X1 “b ^4^2X2* 

As we saw in the Introductory Survey, this theorem originated in the 
special case of Fermat which involved Q{x, y) = -f y^. Gauss proved 
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[Sec. 1] COMPOSITION OF FORMS 

Now we note that ji and jg are the aggregate of 

K = aiXi + Aj/i, aiSji, 

(14) 

[ 0 C 2 — (^2^2 ”1” ^^2* ^2 ^ l2» 

respectively, where x-, y- are arbitrary rational integers. Thus 
ajag = ai^Z2^i^2 + 

aja 2 = ^ 3 fifl 2 (^i ^2 “ ^02^12/2) + ^(«i^i 2/2 + ^2^2Vi + by^y^y 
Otherwise expressed, 

(16) a^ag = + Xy^, 

where, in the manner of (3), 




x^ = x^x^ - 

Vz = + ^ 2 ^ 22/1 + %1^2* 

Finally we infer from (16) that 

(18) jjjg = [^i^2» 

First we see that by the property of products j^ig contains and a^X^ 
a^X, hence X (since = 1). Thus jijg 3 [aia^, X]. But the index 

of the module [ 0 ^ 02 , X] in Oi = [1, X] is clearly ^ 1^2 (= -^[ 12 ] which is 

the index of Jijg in O^) by the index definition of norm in Chapter IV, §§8, 
10. Thus, since jiig and its subset [a^U 2 , X] have the same index in Oj, they 
must be the same by Lemma 8 of Chapter IV, §8. This completes the 
proof of Theorem 1. Incidentally, if 2(jii2) = 2a, then 

(19) Q^ix, y) = a^Q 2 X^ + bxy + c^y^. Q.E.D 

Indeed, in the terminology of (10) and (17) 

( 2 ^) 2 l(^l» 2/1) 22(^2* 2/2) “ 23 (^ 3 > 2 ^s)» 

and we define the symbolic product for composition of classes 

(21) QiQ2 = Q 3 . 

using the same laws of multiplication as those for the corresponding ideal 
product (1). We therefore can state that if some form in represents 
and some form in Qg represents Wg then a form in QxQ 2 exists which 
represents WiWg. 

We note that the general element of ideal ijig is not the right-hand 
member of (16) but the sum of a finite set of such terms in keeping with 
the definition of ideal product. 
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unimodular transformations from (x, y) to (A'„ Y,), 



( 6 ) 



lx = Xi + hiYi, (x ^ + h^Yi, 

= I'l, [y - Y^, 



substituting the first in Qi(x, y) and the second in Qi{x, y). 



jQiHYi, >'i) = Qi(x, y) = V + (5i + 1^1 + • • • , 

^ [q^*{X^, Y^) = Q^(x, y) = A^X^^ + + 2A^h^)X^Y^ + • • • . 

Now since 



( 8 ) 



d=B^^- 4 AiCi = B,^ - 4A2C2, 



= B 2 (mod 2), and we have only to choose and such that 

(9) ^ 1^1 ^ 2^2 “ (^2 ^ 1 )/^ 

in order to make the coefficients equal in (7). This is easy, since 
(Ai, = \. In new notation we have (4). Q.E.D. 



LEMMA 4. Every two classes of primitive quadratic forms arising from 
ideals in Oi in a given field have representatives of this type: 

not Y) = Oi>0, 

^ ’ IQ2(*> y) = + *>*y + “i^oy^ °2 > o> (‘’i- ° 2 ) = ■ 

Proof. Since the discriminants are equal, then, [keeping the notation of 
(4)], we see 

_ ^2 _ Aa^c^ = d 

and QyCi = ^ 2 ^ 2 - Since (cj, ^1 divides Cg and divides c^. This 

is shown in new notation in (10), and incidentally d = — 4oi agCp. 

Q.E.D. 

Proof of Theorem 1. We can now display a suitable system of type (3). 
We note that the forms in (10) are generated by 

“■) rri!’ 

where, (restricting ourselves to the case > 0 in (7), Chapter XI I, §5) 

( 12 ) 2 = (6 - Vd)l2. 

Here A satisfies the equation 

(13) M — ^1472^0. 
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In the cases in which / > 1 no complex roots of unity except ±l occur, 
as we can see by recalling the only two cases, ^/ = — 3 and d = —4, in 
which there are complex roots of unity (6 and 4, respectively) when /—I. 



THEOREM 2. The class number of the order D/ for f > I , is given by 



p(Pd)=/,(d)v,(0/u. 

fAf) 

Q\f 

Here f = and u is the “unit index,** i.e., when d > 0, u = log 

log 1 ^ 1 , whereas, when d < 0, u = I, except for d = —4, u = 2; and for 
d= -3, u= 3. 

Proof. The proof of this theorem might be regarded as an opportunity 
for the reader to review Chapter X with greater maturity. The details of 
the proof are the same, step by step. First note A^[(a)] = |A^(a)|. 

We let Qj, Q 2 , * • * be h(f^d) ideals in belonging to the different classes, 
with (N(at),f) = 1, of course. Then, as in Chapter X, §3, we let 



( 6 ) 

( 7 ) 



FfiT) = 



f number of ideals a in D/, for which 

^ 0 < < r, 

(A^(a),/) = 1. 



number of principal ideals (a) < a, where 
G(a, r) = j 0 < |A^(a)| < T, 

(iV(a),/)= 1. 



Then, combining several steps of §§3 and 4 in Chapter X, we see that 

F£n G(a„r|jVfe)|) 

T ,=i T ’ 

(8) = h{f^d)Kf + (error which -* 0 as T-* oo), 

where, analogous with Chapter X, 



(9a) 

(9b) 

but with a new factor 



_ 2 |log»?^| 

~~W 



ifd < 0, 
if d > 0, 



( 10 ) 2,=n(l-l/9). 

Q I f 
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EXERCISE 1 . Prove Lemma 1 from Theorem 7 of Chapter VIII, §2. (Compare 
Theorem 9, Chapter XII, §7.) 

EXERCISE 2. Work out the composition theorem for 7?( V —5) as done in the 
Introductory Survey. Do likewise for R( 34). 

2. Orders, Ideals, and Forms 

For this section we abandon a restriction which was accepted beginning 
with Chapter VIII, namely, that the ideals are those in the ring of a// 
integers of R{Vd) denoted by Dj. Using the old notation R{Vd) for t/, the 
field discriminant, we take the ring of integers congruent to a rational 
integer (mod /) called an order (compare Chapter IV, §10): 

(\a) = V5)/2], 

where / > 1 is now a fixed positive integer. For convenience we abbreviate 

(1^) ojf^ f{d - Vd)l2 = fo)^. 

Our purpose is to consider ideals in Considering j the ideal as a 
module in D^, we can reduce it to the canonical form by using the tech- 
niques in §7, Chapter IV : 

(2) j = [fl, Z? + ccOf]y c > 0, a > b >0. 

The norm N[\] is ac, the index of j in as before. The discriminant of 
Df is seen to be 

1 OJf ^ 

(3) A/= = 

I iOf 

The basis, as written in (2), incidentally, is ordered. 

We next examine Chapter VI 1, §§6 to 8, and learn (to our delight) that 
the ideals j for which 

(4) (^[j],/) = 1 

have a unique factorization. It is not hard to see, obeying the last restric- 
tion above, that we can reconstruct the finiteness of ideal classes, the basic 
factorization law, and relevant techniques such as equivalence classes and 
strict classes. Note that in Df the equivalence relation aX = requires 
that a, b, A, (x all be in For strict equivalence we require N{Xfx) > 0. 

We shall dwell in some detail on the class number-formula. We call 
h{pd) the class number of the ideal classes in the order and the 
fundamental unit, chosen as before, > 1 . Clearly r\f = for some integer 
u{> 0), since rj^ is also a unit of Dj. (See Lemma 9, Chapter VI, §5). 

We likewise define h^{pd) as the number of strict ideal classes. 
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do is to avoid factoring the p in that divide /, in using unique factoriza- 
tion, Thus d) is compared \vith {(j) (see Chapter X, §7): 

(16) M*; <i) - n (i - -i) n (i - ■ W 

j))/\ p/j»f/\ P / 

Since only a finite number of factors is involved, we can see that as 5 1 

(using C(s; d), as factored in §§6 and 7, Chapter X), 




Finally, as in Chapter X, §8, designating h{d) by and the k of Chapter 
X, §§3 and 4, by k^, 

(18) lim lf{s\ d)(s - 1) = h^K^X, H (l ~ 

s-^1 < 7 1 / ^ q ' 

We now obtain the final result by canceling common factors from (18) 
compared with (15u). Q.E.D, 

We can supplement Theorem 2 with the information that h{pd) > h{d)^ 
but a proof is far from obvious (see Exercise 7, below). There is more to 
be seen, however. First of all, by Exercise 4 (below), in the case in which 
J < 0, / = h{pd)jh{d) is an integer, and this integer is >1, generally. 
The real case is more difficult, but a method of matching ideals in D and D/ 
(as is performed in Exercise 7) will show that J, again, is an integer >1. 
This implies that the minimum w > 0 for which e (or rj^ — r}f) 
divides fff), which is by no means obvious. Less obvious indeed is the 
unsettled question when h(dp) = h(d). For instance, when d = 28, 
= 8 + 3 V7, we can calculate : /i(28/^) = /^(28) = 1 when / = 2, 7, 
14, • ' • . The last result means that (8 4* 3 a/7)^ ^ m (mod 14) when 
0 < == rational integer m. (It can be checked that 

(8 + 3Viy^ = 1 modulo 14.) 

Dirichlet showed in 1856 that for certain d there exists an infinite 
number of / for which h(pd) = h(d). It is not known if such an / exists 
for each d, (Compare Exercise 6, below.) 

There is no difficulty setting up a correspondence between the h^(dP) 
ideals and forms in D^, the primitive forms having the form Q{x, y) = 
ax^ 4 bxy 4 where (a, 6, c) = 1 and — 4ac = pd. The problem 
Q{x^ y) m can be solved by ideal factorization or composition when 
(m,/) =1. It is not our purpose to give the details here. 

The study of orders does not, by itself, lead to particularly vital problems. 
The role of orders is still deeply entrenched in the theory by the old 
problem of finding solutions to g(x,. y) = m for an arbitrary form. The 
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Now our attention must focus on (10), the other components of (8) being 
fairly straightforward. The factor (<1) arises because for (7) we have 
to write a somewhat more restrictive set of conditions (for a equal to each 
representative a^), as compared with Chapter X, §3 : 



(ii) 



a = [aj_, ag], 

. (x = + agy, 

A^(a) = ax^ + bxy + {b^ — Aac = N(a)^Pd\ 



excluding cases in which (iV(a),/) ^ 1 . Since (iV(o),/) = 1 , we can choose 
jV(ai) = a as relatively prime to / (for each a = a^). The problem is to 
consider the effect on the density of algebraic integers in Of when we make 
the specific restriction imposed in (7) 



(iV(a),/) 7 ^ 1. 

We note first that if ^ |/ and if iV(a) = 0 (mod q) for q odd, {q f a), 
(12) laN{cL) = {lax + byy — dpN(afy"^ 



exactly when lax + = 0 (mod q). We therefore see that for any 

residue class of y modulo q, there are q — 1 admissible classes of x. 
Even when q = 2 (and l\f) a is odd and b is even, since P — Aac = 
dpN^(a). Thus 

(13a) ax^ + bxy + cy^ = x^ (mod 2), 

or 

(13b) ax^ + bxy + cy^ = x^ y^ (mod 2). 



Thus it is still true for ^ = 2 that for every y there is only one (= ^ — 1) 
admissible class for x for which x^ or x^ + is odd. By the Chinese 
remainder theorem, there are only llq{q — 1) admissible congruence 
classes modulo Yiq in a total of (11^)^, providing a ratio of 

(14) A,=n(4(4-i))/iT(4^)- 

q\ f ! d\f 



On the other hand, analogous with Chapter X, §7, 



(15a) 


lim = lim d){s - 


- 1) = h(fd)K„ 




T-^co T s-»l 




im 




(‘ - 4 ).) 



for a an ideal in Of and (A^[aj,/) = 1. Here, very easily, all we need to 
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EXERCISE 3. Show /?(— 5^ -3) =2. Find the two representative ideal classes 
and forms for by starting with these modules and using Theorem 3 to 
construct ideals: 

[1, 5pl [5, pi [5, 1 + pi [5, 2 + pi [5, 3 + pi [5, 4 + pi 

where p = ( — 1 + V —3/2). (Note the three-to-one correspondence of modules 
and ideals.) 

EXERCISE 4. Verify the earlier statement that when d < 0, h(f^d)lh{d) is an 
integer. It is 1 only when d = —4,/ = 2; d — —3, / = 2 or 3, and d ^ 
(mod 8), f = 2, 

EXERCISE 5. Verify that h{A • 28) = /?(28). Find //(9 ■ 28). 

EXERCISE 6. Verify that if (1 + ^2y^ = and if w - 2^n for n 

odd, then 2" || 5^. (Use induction on .y.) Hence show h{2^^ -8) = 1. Likewise, 
show ■ 5) = 1 and h{2^^ -5) = 2 for A: > 3. 

EXERCISE 7. Show that if a =[a,b coj^ and {ac,f) ~ 1 then a = [^7, 
bf + r/o>j] ~{a,B F co)^], where B = 6/(mod«). Show that if a = b then 
a — b, and that if a b in then o b (in Oi). Show that = iii 2 , using 
(11) of §1 (above), and that if c = ab then aa^h = cafic for some a and (i in Oj 
relatively prime to /. 

EXERCISE 8. Show that for a e (N(oi),f) = 1 then (a) '^(l) in £)f if and 
only if (a) (1) (mod/). From this show the two definitions of equivalence can 

be identified. 

EXERCISE 9. Referring to Exercise 3, Chapter IX, §1, show that d>[(/)] = 
show that as U and r vary, njy' takes on «</>(/) values modulo /. 
Thus show that (5) also gives the correct class number for definition (21). 
EXERCISE 10. Derive a formula for h^(f^d)jh(pd) analogous with Theorem 3, 
Chapter XII, §3. 



3. Genus Theory of Forms 



As a final topic^ we consider the basic problem of whether congruence 
classes for a prime p determine its representability by a quadratic form in 
the manner of Fermat’s famous result that for odd p 

(1) p — A- exactly when p = 1 (mod 4). 



Ideal theory would be enormously helpful. For instance, if h^{d) = 1, 
only one form enters, and we easily see for (/?, Id) = 1, 



( 2 ) 



o , d 1 o 

A- xy — 

4 

P = Q{x, y) = < or 

[ ^ — (d/4)?/^ 



(if d ^ i (mod 4)) 



(if d = 0 (mod 4)) 



^ In the remainder of this chapter we return to the usual convention that d is a field 
discriminant (or/= 1). Thus §2, where/ > 1, is not necessary for any other part of 
the book. 
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following theorem even strengthens the importance of ideals in orders by 
making ideals “as general” as modules in the quadratic case. 

THEOREM 3 . Any module [a^, ag] in corresponds to at least one 
ideal j == ^2] some order in the sense that [a^ ^2] 

for some integers X^ and X^ in Oi- 

Proof. We can appeal to the method of Theorem 6 in Chapter XI L 
We assume that the module [a^, is ordered. We write a quadratic form : 

(19) N{cn^x + oL^y) = t{ax^ + bxy + cy^)^ <2 > 0 

where t is chosen so that (a, b,c) = 1. (From §5 of Chapter XII, e.g., if 
a = [a^, ag] is actually an ideal of then t would be A^[a].) But, by the 
same process, extended to the case of an order, we can regard ax"^ + bxy + 
cy^ as the form generated by the ideal in : 

[a, (b - Vd,)l2l 

where df ^ — Aac = pd{d is the field discriminant). This ideal is our j, 

by a comparison with the method in §6 of Chapter XII, (the details are 
left to the reader). Q.E.D. 

The construction of the ideal classes in is not necessarily dull. We 
could, of course, factor all p < fVd required by Minkowski’s theorem 
(Chapter VIII) and form the classes. 

Relatively recently, however, Weber (1897) and Fueter (1903) showed 
how to obtain ideal classes in Dj. from a new type of modified equivalence 
class in designated by (mod /).” For two ideals a, b in Oi, 
which are relatively prime to f we write 

(20) a b (mod /), 
when 

(21) Xa = jub and X = /xr (mod /) 

for a rational integer r and integers X, fx of Oj, which are all relatively 
prime to /. Thus far the definition remains entirely in 
We then take, a^, the representatives of the different equivalence classes 
(mod /), and call the aggregate of elements common to a, and 
e.g., = Q; n £>/. The can be shown to be ideals in O/, representing 

all its ideal classes. The strict equivalence a b in Di fits in, semantically 
at least, by the designation “a b (mod 00 ),” and, if N{Xyi) > 0 in (21), 
we would say “a b (mod / 00 ),” like Basse’s congruence in Chapter H, §6. 
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of similar properties of (dim) = (dl\m\) and / > 2. In fact we verify 
by substitution (see Exercise 11, below): 

LEMMA 5. The remaining character in (7) is given by 

( (— l/|m|) sgn m in cases (3b) and (4b), 

(2/m) in cases (3c) and (4c), 

(— 2/|m|) sgn m in cases (3d) and (4d), 

Here, sgn m means “the sign of (+ I when m > 0 and — I when m < 0). 
When d < 0, it is understood that m > 0 only. 

We now begin the process of classifying quadratic forms. 

LEMMA 6. All integers m represented by a quadratic form of field 
discriminant d and relatively prime to 2d have the same-value of Xi(m) for 
each / and satisfy (d/m) = 1 . 

Proof. Let and mg be represented by the form 

(9) y,) = ax,^ + bx 0 ^ + ct// = (/ = 1, 2), 

and suppose that (a, 2d) = 1, by choice of the form keeping the same 
proper equivalence class. Then, with d = — 4aCy we easily have 

(10) 4am j = (2axj + by^)^ — dyf 

Then if Xi is of the form (mjq) where q | d and q is odd, 

4am j = perfect square (mod q) 

and Xi(^^j) = i 

( 1 1 ) = Xi(^) 

Furthermore, if is not of the form (mlq^), then (1 1) holds for / = 1 by the 
product formula (7), once we verify that (djmj) = 1 . 

To see this last statement, let Q(x, y) = m be a. representation in which 
(x, y) = \. Then all prime factors, /?, of m, by Theorem 9 of Chapter XII, 
satisfy (dip) = 1 (as /? f d). If (a;, y) becomes (gx, gy), then a factor g^ is 
contributed to w, not affecting the residue symbols. Q.E.D. 

We therefore define for every form the generic characters XiiQ) 
form to be these values of Xt(^) where (m, 2d) = 1 and Q represents m : 

(•2) xi(Q)> Xi(Q)> • • • > XriQ) 

The characters of course apply to the class of properly equivalent forms as 
they represent the same numbers. For the same reason the conjugates 
Q(x, y) and Q(x, —y) have the same generic character even if they are not 
properly equivalent. 
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if and only if {djp) =1. If > 0 and N{r}^ = + 1, then h^{d) = 2h{d) = 
2, and there is some question whether Q{x, y) or — Q{x, y) should represent 
p. A fairly simple result still holds (see Exercise 17 below). When h{d) > 1, 
the matter is not so trivial; we find that we must first divide the forms into 
genera (plural of genus) in considering which forms represent a prime. 
The composition and ideal multiplication theorems make it suffice to 
build on prime factors p, except for sign considerations. 

As a preliminary step let us consider a field discriminant d. There are 
several cases according to whether the square-free kernel D is odd and 
i) = ±1 (mod 4) or even and Z>/2 = ±1 (mod 4): 



(3«) 




' = 1 (mod 4), 


(3b) 


d = 4q^q^ • • 


• = 12 (mod 16), 


(3c) 


d = Sq^qa ' ‘ 


• q^=% (mod 32), 


(3^) 

and 


d = Sqaqs ' ’ 


• = 24 (mod 32), 


(4a) 


d = — 


•q^ =1 (mod 4), 


(4b) 


d = -4qaqa 


' ' ^ q^= 12 (mod 16), 


(4c) 


d = —^q^qa ' 


- • • = 8 (mod 32), 


(4d) 


d = — 8^2^3 ' 


• * = 24 (mod 32). 



Here are different positive odd primes and r is the total number of 
different prime divisors of d. 

For each d we consider certain Jacobi characters as functions of m 
(relatively prime to Id), noting that when < 0 we choose only positive 
forms, (w > 0): 



( 5 ) 




d ^ 1 (mod 4), 
d ^ \ (mod 4). 



Now the law of quadratic reciprocity tells us, easily, that in cases (3^) 
and {Ad) 

(6) ilxlm) = fi (-) = n (^*) = (-), 

1 = 1 1 \qi/ 1 \m / \m/ 



using = qi{—\lqd = 1 (mod 4) and recalling that d must have the 
sign of In the remaining cases the matter is more detailed, but we 

define %^{m) by the relation 

0) Xii^) n XiM = (m > 0 for J < 0). 

1 = 2 



We thus have defined a multiplicative function of m on the basis 
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THEOREM 5. The principal genus contains precisely those forms that 
are squares of some form under composition. 

Proof, We shall sketch a proof of this very important result. First we 
make a transition to ideal theory and nonstrict equivalence classes. We 
consider four different types of field of discriminant d with r distinct prime 
factors and fundamental unit rji. (We let A, B, M be general symbols for 
rational integers.) 



Type 1 ; d < 0. 

Type 2; d > 0, N{ri^ = — 1. Here d ^ -b and (4M — 1) f d. 
Type 3 : d > 0, N{rj^ = + 1 and d = a^ A- b^. Here (4M — 1) f d. 
Type 4 : d > 0, N{rji) = -h 1 and d -b Here q^. = (4,y — 1) | d 

(by convention the last prime factor of d is taken = —1 mod 4). 



Now consider the following table which summarizes past results on 
ambiguous ideals : 

TABLE 1 



I 


II 


III 


IV 


V 


VI 


VII 


VIII 




Principal 


Independent 




Relation 




Form Genera 




Field 


Ambiguous 


Ambiguous 


Ambiguous 


of Form 0 to 


Form 


without 




Type 


Ideals 


Ideals 


Classes 


Negatives (conj.) 


Genera 


Negatives 


/ 


1 


2 


jr-i 


2r-l 


No negatives 




2t~i 


r — 1 


2 


2 


2»--i 


2r-l 


Equivalent, hence 
same genus 


2'-! 


jr-l 


r - 1 


3 


4 


2f-2 


2r~l 


Inequivalent but 
same genus 


2r-l 


2r-l 


r — 1 


4 


4 


2f— 2 


2r~2 


Inequivalent and 

Xr«?) = -X/-0) 




2r-2 


r - 2 



The first four columns embody Exercises 8 to 11 and 13 of Chapter XI, 
§3, if we note that the r different prime factors of d produce r ramified 
(ambiguous) prime ideals and 2'’ possible ambiguous ideals by selection of 
subsets. Column IJ expresses Exercise 13, whereas Column III expresses 
the number of ambiguous ideals independent to within principal nonunit 
ideal factors (Column II divided into 2^), Column IV reflects the presence 
of the special class for Type 3 (see Exercise 8). As in Chapter XI, our 
ideal classes here are nonstrict. 

Looking at Column V we see an application of Theorem 8, Chapter Xll, 
§6, together with the fact that the generic characters of fields of Type 3 
satisfy xf—m) = xfm) for all / (whereas “taking the conjugate” preserves 
genus). To cope with the sign relation involved in fields of Type 4, we cut 
down the number of proper equivalence classes Q of forms to onehalf by 
considering only the forms 2 6 Q with a definite choice of sign e: 



(15) 



eQ{x, y) 
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We next consider the forms Q for which the Xi{Q) are equal to some 
preassigned array of signs c, = +I or — I, 

r 

(13) ^2, • • • , subject to JJ = 1- 

1 = 1 

There are 2'""^ possible arrays, and the set of forms corresponding to each 
array is called a genus of forms. The forms for which all = + 1 are 
naturally called the principal genus of forms. Each genus is also a collection 
of proper equivalence classes. The genera are multiplied by composition of 
classes, in the notation of (20) and (21) of §1. Thus, if e Qj, 02 ^ Q25 
and 03 £ Q1Q2, 

(14) xlQdlAQ^ = XiiQi), 1 <i <r, 

since ordinary multiplication is involved in composition. The classes Q 
belonging to the principal genus accordingly form a subgroup of the class 
group. Each genus constitutes a coset of the principal genus (see Exercise 
9, Chapter I, §6). 

LEMMA 7. There is an odd prime p (indeed infinitely many) for which the 
generic characters XiiP) == ^ preassigned array of signs whose 

product is I. 

Proof. Consider xfp) = {pjq^ = for / = 2, • • • , r. Since the q^ are 
odd primes, we choose p congruent to a residue or nonresidue modulo q^, 
as the case may require, whereas xfp) = is a condition on p modulo an 
odd q^ or modulo 4 or 8. The Chinese remainder theorem determines p 
from several independent arithmetic progressions, whereas {djp) = 1 
automatically from (7). Dirichlet’s theorem (see Chapter X, §1), yields the 
result, Q.E.D. 

There is therefore at least one class of forms in each genus by the 
corollary to Theorem 9, Chapter XII, §7. We then use the coset property 
to see that there is an equal number of classes in each genus, and we have 
proved the following result: 

THEOREM 4. If we consider h_^(d) proper equivalence classes of forms 
with discriminant d equal to afield discriminant, then they can be subdivided 
equally into genera of h^(d)/2^~^ forms which form a subgroup of the 
proper equivalence class group under composition. 

This theorem was proved by Gauss in 1801. Since Dirichlet’s theorem 
was not available then, another proof had to be given (in fact with no aid 
from infinitesimal analysis). Gauss further showed the famous duplication 
(meaning “squaring”) theorem: 
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not restricted modulo r,- (odd). On the other hand, all perfect squares are 
in the principal genus by composition formula (14), but the principal genus 
numbers as many classes as squares, by Theorem 4 (modified to accommo- 
date ideal genera for Type 4). Hence Theorem 5 follows, Q.E.D. 

We can pursue Theorem 5 one step further; the square of a form 
necessarily represents a perfect square (prime to Id), since composition 
simulates ordinary multiplication. A form representing a perfect square 
(prime to Id) is necessarily in the principal genus, which is determined by 
the odd primes in d. Hence Gauss noted the following: 

THEOREM 6. A quadratic form whose discriminant d equals the dis- 
criminant of a field represents a square prime to Id if and only if the form is 
in the principal genus. 

COROLLARY. The quadratic form In the foregoing theorem represents 
a perfect square (relatively prime to 2d) if and only if it represents a 
quadratic residue (relatively prime to 2d) modulo every odd prime divisor 
of d. Negative definite forms remain excluded. 

The corollary is due in one form to Legendre (1785), and it can be proved 
in a fairly elementary manner. Its proof is still of sufficient depth to deserve 
a special analysis in the Concluding Survey. Gauss reversed the procedure 
to prove Theorem 4 from Theorem 6, (Legendre and Gauss, in fact, 
considered forms with no restriction on discriminant.) 

We can now return to the motivating question of this section, namely, 
when do congruence properties of a prime p determine its representability 
by a quadratic form? Now we see a partial answer in that this is always 
the case when h{d) = 2^ or when there is exactly one ideal class in each 
genus. For this reason ideal genera were used (although a corresponding 
theory of ambiguous forms was thereby ignored). Gauss, indeed, felt that 
the search for fields of class number unity was less meaningful than the 
search for fields of one class per (ideal) genus. 

The easy result that 2* divides h{d) helps us to understand to some extent 
why certain fields with very composite d must have large class numbers, 
but an adequate understanding of the reason for odd cyclic groups in the 
structure of the class group is still, generally speaking, on the outer 
frontiers^ of number theory. 

^ The nature of the odd cyclic structures is even more mysterious in regard to the 
occurrence of repeated prime powers in the class group. The smallest known instance 
in complex fields is d = —3299 where Z(3) X Z(3) occurs in the class group (Gauss). 
For real fields the smallest known instance \% d = 62,501 where the same factors occur 
(Pall). 
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where e = v)) = xX^) = xX^)^ Here m is, as before, any integer 

represented by Q{x, y) and such that (w, Id) = 1. Of course %r{eQ{x, y)) 
= 1, thus the product of the remaining %x{eQ) ‘ * • Xr-X^Q) always 1. 

We then obtain V genera for the forms (see Columns VII and VIII) 
that are determined by the independent characters 

( 16 a) xX^Q\ xMQ\ • * • . xk^Q) 

for h^{d) classes of forms in fields of Types 1 to 3 and h^{d)\l classes in 
fields of Type 4 according to (15). Note that —2 Q l^ad to the same 
eQ, since Xr(“l) = “1* 

We can now make the transition to ideals by considering only nonstrict 
equivalence classes. In fields of Type 3 (or 4) this amounts to using only one 
of the equivalence classes of a and aV^, since they both lead to the same 
genus (or the same eQ). We call the 2* genera thus determined the ideal 
genera as distinguished from the form genera originally introduced. 

Table III (appendix) lists the values of all (^ + 1) character symbols for 
the ideal genera in order of the indicated prime factors of d (except that 
for Type 4, = — 1 (mod 4) is listed first in the factors of d, then omitted 

in the list of character symbols). 

We use Exercise 18, Chapter XII, §7, to write the generic character of 
an ideal class directly in terms of an ideal a it contains : 

il6b) Xi(eN[a]), • • • , xXeN[a]), (7V[aj, 2d)^ 1, 

where e — \ except for fields of Type 4 where e = /,.(iV[o]). These t 
characters are independent in value. 

Let us now visualize the (nonstrict) equivalence class group for ideals. 
Using Kronecker’s decomposition theorem, we set 

G = Z(2^0 X • • • X Z(2^0 X Z(ri) X • • • X Z(r J, 

/^(t/) = 2«i+ - >2^ 

where the indicated groups are cyclic with generators (say) gi, * • * , 

* * ’ » 8u' values of s^ > 0, whereas r^ > 1 are odd. Here the 

value of t must agree with Column VIII of the table, since the ambiguous 
classes (whose square is the identity) are 2^ in number: 

{\lb) g = Wi = 0 or 2"‘/2. 

We can verify that precisely h{d)jl^ elements are perfect squares. Let 

(17c) g = g/i • • • g.^'gr^ * • * gr« 

where we can solve for x^ and x^' in 

{\ld) = 2x^ (mod 2®*) and w, = 2x/ (mod r^). 

Then the are each restricted to half the values modulo 2®% but the are 
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Let n and m be rational integers, m # perfect square, « 7 ^ 0; let ^ be 
any prime. Hilbert defined 



( 1 ) 






+ l or - 1 , 



depending on whether or not it is true that for each power (5 an integer 
> 1 ) we can solve 



( 2 ) 



n = N{^s) modulo 



for some integer in R{V m). (When w is a nonzero perfect square, the 
symbol is taken as 1 for completeness.) There are many rules of calculation 
for which we refer to more advanced treatises. We state only three and 
without proof: 



(3) 

(4) 

( 5 ) 



m 'j _ 



I n, m \ _ /n 
\ a / \a 



q I m, 
n. 



q odd, 



These rules state (respectively) that the symbol is multiplicative in «, tnat it 
is “interesting” for only a finite set of primes (divisors of 2 /w«), and that it is 
really a quadratic residue symbol. (The last equation (5) is essentially the 
matter discussed in Exercises 14 and 15 in Chapter I). 

In this terminology we can finally identify the genera. We let * * * j 
qj. be the prime divisors of d, as before. Then the array of signs [corre- 
sponding to ( 12 ), §3] identifying a genus of forms, one of which represents 
the value m (prime to 2d\ is 



( m,d \ 

\ q^ / ' 






If we consider the genus of an ideal a we can take m = iV[a], if (A^^[a], Id) = 1 
(by Exercise 18, Chapter XII, §7). The independent characters [corre- 
sponding to (16^), §3] are 



(7) 



( 



eN[a], d 
Qi 



eN[. 






where e = 1, except for fields of Type 4 in which ^ — 1 (mod 4) and 
e = j . Here q^ can be taken as 2 for some of the cases in 



Lemma 5, §3. 
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EXERCISE 1 1 . Complete Lemma 5 by verifying (7) in each case for positive and 
negative m. 

EXERCISE 12. Write out the characters for D — —3, -5, —62, —78: /) = 3, 
5, 6, 34, 65, 82. 

EXERCISE 13. Verify the genera in Table III (appendix) for D = —62 (taking 
the class structure for granted). Show that exactly one of the forms listed satisfies 
the representation: 

+ 62 y^ \ 

Ix^ + Ixy + V = p if (2//?) = {pm = 1 

2x^ + 31^2 j 



3.c^ + 2xy + 21?/2 
\lx^ + 4xy + 6y^ 



^ p if (2ip) = {pm = - 1 , 



where (y?, 62) = I. Verify this numerically for two values of p{>U) in each 
genus. (Note that there is no need to put a ± sign on the middle term and that 
the uniqueness of the form representing p comes from Theorem 5, Chapter XII, 
§4). 

EXERCISE 14. Construct the genus classifications analogous to Exercise 13, 
when D — \0, D = 65, and verify each genus for at least one prime. 
EXERCISE 15. Construct the genus classifications for /> = 14, i) = 42, and 
determine which sign Xr(G) to be selected for each form. 

EXERCISE 16. Do likewise for D = 34. Are both +/? and —/? representable are 
by each form? 

EXERCISE 17. Referring to fields of Type 4, explain the choice of sign in (2) if 

h4^d) = 2, h{d) = 1. 

EXERCISE 18. Using techniques analogous to Chapter II, §7, show that there 
are exactly 2* real characters in the (nonstrict) ideal class group [see (17u)] and 
show that these characters must be those formed by takingproductsXa(0)Zb(0 ' ' ' 
y,m{Q) where a, /?, • • •, w is a subset of the indices 1, 2, • • • , /. 

EXERCISE 19. Define the real characters for Exercise 18 when D == —65, 
D = 34. 

EXERCISE 20. Prove the lemma in Chapter X, §12. 

EXERCISE 21. Show that the corollary to Theorem 6 would not hold true if 
negative definite forms were permitted, by considering a form that represents — 1, 
in connection with (4^, d). 

EXERCISE 22. Consider G+ the (proper) equivalence class group for forms. 
Show that, for fields of Type 1 or 2, G and G.^ have the same decomposition, 
whereas, for Type 3, one factor (say) Z(2''i) is replaced by Z(2^‘i + ^) in G^, and, for 
Type 4, G^ has an extra factor Z(2) as compared with G. 



4. Hilbert’s Description of Genera 

Hilbert devised a remarkably general quadratic character symbol to 
avoid the inelegant specialization of cases required in the last section (for 
example, in Lemma 5, §3). The symbol proved to be more easily generalized 
to fields of higher degree. 



‘CONCLUDING SURVEY 



The reader may very well ask were this subject leads, and he should be 
prepared to receive a variety of answers. 

Some of the new directions are so strongly algebraic, combinatorial, 
or analytic as to be lacking in direct appeal to the main tradition. We shall 
select three topics, which we believe have such appeal and which are 
closely related although seemingly different in origin. 

We shall combine legitimate deductions and rash conclusions, freely 
intermingled for quick reading. The more serious student, of course, will 
refer to advanced treatises for details. 

The new directions, inevitably, involve algebraic numbers of degree n. 
An algebraic (rational) number of degree n is defined as a root of the 
irreducible equation with rational coefficients a^\ 

(1) <9^ + + * ' • + ^n-l^ + = 0. 

An algebraic integer is one whose defining equation has only rational 
integers, as coefficients a^, A field R{6) is defined as the set of values 
resulting from rational operations with 0, as in Chapter III. Sometimes it 
is convenient to consider some i?(0i, ^ generated by two elements, 

but, indeed, any field can be generated in a variety of ways. Algebraic 
integers again form a ring. We speak of fields including one another, 
^ ^(^ 2)5 usual way for sets. 

The ideal theory is no harder than in the quadratic case, in principle. 
There is unique factorization into ideals but a finite class number which 
generally exceeds 1 (producing nonunique factorization into principal 
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Moreover, it would follow that the product of the indicated signs in (6) is 
1. Hilbert found, however, that to achieve the height of perfection a new 
symbol must be introduced 

(8) - ±1, 

depending on whether or not n can agree with iV(a) in sign (m,od oo) for an 
a in R(V m). (The only case in which the value is — 1 is easily « < 0 and 
m < 0.) We now have the unconditional statement 

(9) n (-) = (-—); 

q \ 2mn \ C[ / \ OO / 

or, still more elegantly, 

(1^) n (^^^1 = 1, q — all primes and oo. 

Q \ q / 

The reader will notice that in some way (10) provides a connection 
between quadratic reciprocity and unique factorization. The fact that the 
product equals 1 is a manifestation of quadratic reciprocity, and the fact 
that the only interesting q are divisors of Imn is a manifestation of unique 
factorization, if we compare Lemma 5, §3. 




CYCLOTOMIC FIELDS AND GAUSSIAN SUMS 



233 



and, by (5) and (6), 

(8) R - N -= T = S, 

The expression (6) gives us some insight into S physically, since it 
suggests a superposition of n units with directions determined by If the 
superposition is “random,” well-established laws for estimating “probable 
error” would suggest a total length |5| equal to Vn. 

In fact, we can rigorously establish l^l = Vn, for, taking complex 
conjugates, we see that 

n-l 2 

(9) 

(10) |s|2= s5 = ”2 = ”2 

r,s = 0 r„s = 0 

If we let r — ^ r + ^ = 25- 4- we find that q and s take on independ- 

ently all values modulo «. So do q and v — 2s q. Thus 

(11) 0- = ”21 +? iV)^ = « + 0, 

q,v = Q 0 = 0 O = 0iJ = l 

since the powers (0^)® take on all exponents from 0 to (« — 1) when q varies 
(for = 1, 2, *•*,« — 1). Finally 

(12) |5| = Vn. 

Gauss showed also (with more delicacy) that 

S = Vn, n prime = 1 (mod 4), 

5 = iVn, n prime = — 1 (mod 4). 

The transition from (12) to (13) involved an entire world of mathematics 
equivalent in depth to quadratic reciprocity. The result we need is only 
slightly stronger. 

Letting d be the positive or negative discriminant of a quadratic field, we 
redefine 0 and T by using the Kronecker symbol: 
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ideals). The laws of decomposition of Chapter IX are more complicated, 
but a rational prime breaks up into no more than n ideals (in a generally 
irregular fashion). The theory of quadratic forms is replaced by a much 
less attractive theory that makes us willingly confine all our attention to 
ideals in the ring of all algebraic integers of a given field. 



CYCLOTOMIC FIELDS AND GAUSSIAN SUMS 

Aside from the quadratic field, the most important is the one generated 
by a root of unity of index «, or the cyclotomic (“circle-cutting”) field, 
generated by powers of 

(2) Q = exp iTTijn = cos iTrjn + i sin iTrjn. 

This root and its powers = exp iTTitjn = cos iTrtjn 4- / sin iTTtjn are 
represented as the vectors from the origin to points of a regular polygon of 
n sides with center at origin and one vertex at 1 = 0”. This follows from 
de Moivre’s theorem in elementary fashion. The important feature is that 
the powers B^ are determined by the exponent t (mod n). 

When n is prime, the reduced equation defining B is 

(3) + r-2 + ... + 0 + 1 = 0. 

(The irreducibility of (3) is not obvious, but we always omit details for the 
sake of the survey.) This cyclotomic field first was seeen to be more basic 
when Gauss (1800) separated the exponents as residues or nonresidues 
(mod w), excluding 0, and wrote 

[R = yB^ /residue, 

\ t 

=r 2 u nonresidue. 

Thus, when n = 5, R = B B^, N = B^ B^, and, when n = 7, R 
B B^ B^, N = B^ B^ B^, etc. By (3), however, 

(5) i? + iV + 1 = 0. 

Gauss next introduced the so-called Gaussian sum 

(6) S = 2;V'=1 + 2R 

r = 0 

(as we can see by noticing that the squares, r^, equal each residue twice). 
Another closely related expression, using Legendre’s symbol (rjn) is 





CLASS FIELDS 



235 



To illustrate, take the field i?(V —5) where h = 2. We recall from the 
genus theory that for a given rational prime p 

if (—20//?) = — 1,/? does not factor in R{V —5); 

(^?) if (5//>) = {—\jp) = I (or p = 5),/? factors into two principal ideals 
and p = 5y^\ 

(c) if (5//?) = (— 1//>) = — 1 (or/7 = 2), /7 factors into two nonprincipal 
ideals and p = 2x^ + 2xy + 32/^. 

Let us consider the nonprincipal factors of 2. Since (2, 1 -f V —5)^ = 
(2), then by introducing V2 into R(V —5) we have an ideal number for 
(2, 1 + V“5). The ideal (2, 1 + V— 5) can be described as precisely 
those numbers in R{V —5) that are divisible by V2 in the sense that the 
quotient is an algebraic integer, as in (1). For example, 



(18a) 



72 

1 +y/~5 



V2 



= y. 



^^-2 = 0, 

(y" + 2)" + 5 = 0 . 



We are now in possession of a field R(V2, V—5) generated by adjoining 
V 2 to R{V — 5). It could also be regarded as a relative-quadratic field or a 
quadratic field over R{\/ — 5). For instance, the algebraic integer y in (18a) 
could be regarded as a root of the quadratic equation with coefficients in 
R(V~5): 



im 



y2 = (1 + V_5)2/2. 



Not only 2j = (2, 1 + A/— 5), but all nonprincipal prime ideals r become 
principal in i^(A/— 5, \/2), This is true because there is only one non- 
principal class, 2i, Thus 2it is principal. For example. 



2i3i = 2i(3, 1 + 2A/-5) = (1 - V^), 



2i7i = 2i(7, 1 + 2 V- 5 ) = (3 - V-5). 

If 2j = (Vl) in R(V —5, Vl), it is clear that 21^31^71^ 1. Yet 
trouble lies ahead, since R(V —5,V2) has some nonprincipal ideals, in 
fact, its class number is 2. 

Now, have we really simplified factorization theory by making non- 
principal prime ideals become principal? On one hand, 3^ and 2i are 
happily both prime and principal in R{V—5, a/ 2), as can be shown, but, 
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Dirichlet (1837) used the result (15) for an elegant computational 
purpose : in deriving the class number formula in Chapter X, §9, we were 
confronted with a decomposition into partial fractions. It generally takes 
the form 



(16) 



MED. 1 

1 - r = l 1 - d’’x \d\ ■ 



Here can be shown as, essentially, a Gaussian sum of type (14). Then, 
following out the calculations of Chapter X generally, we obtain the class 
numbers 



(17) 



h = 



d~l 

-II 


r) 


log 


. 77T 

Sin — 


r = 1 






d 



2 log 

2\d\ r=i\r/ ■ 



ltd > 0 , 



if < 0, 



in the terminology of Chapter X. The reader can convince himself, 
somewhat, by testing with small d. 

As elegant as an “actual class-number formula” may be, Dirichlet’s 
successors have read an even more significant meaning into formula (15). 
The formula shows an imbeddability result for the quadratic field of 
discriminant d\ the cyclotomic field generated by 0, of index \d\^ contains 
i?(\/^). Incidentally^ no lower index will suffice. Now we recall that d is the 
modulus that determines whether a prime p splits (by the residue class of p 
modulo |^/|). This is more than coincidence; it is the basis of a completely 
independent proof of the imbeddability theorem! 

Can such properties be established for other fields (which need not be 
contained in any cyclotomic field)? The answer is still incomplete. 



CLASS FIELDS 

We digress to make the historical observation that Dedekind’s ideal 
theory was the third major attempt to cope with nonunique factorization. 
The first was, of course. Gauss’s composition of forms (1800), and the 
second was a relatively neglected explanation of Kummer (1854) that 
unique factorization can be achieved by “actual” ideal numbers. Looking 
back at Kummer’s work (with the wisdom acquired from Dedekind), we 
would say that if the class group has order (class number) h then for any 
ideal j, j* = (a), a principal ideal. Thus j can be replaced by W cc, the 
“actual” value of the ideal j. 
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{b) The principal prime ideals in R{V —5) split in R{V —5, V— 1) into 
prime ideals. 

We note that the principal prime ideals in — 5) are either unfactor- 
able rationals, /?, such that (—20//?) = — 1, or divisors of p in the principal 
genus for which (5//?) = (— 1 //?) = 1 . In either case, (5//?) or (— 1//?) is + 1 . 
Thus the prime p splits in i?(V5) or R{V — 1), To reconcile this factoriza- 
tion with the behavior in we must assume a further split in 

i^(V5, V~\). For ^mple, take 29 = (3 -}- 2V^)(3 - lV~S) = 
(5 + iV — 1)(5 — iV —1), We could show the four ideals generated by 
the pair of elements: ((3 ± 2 a/ — 5), (5 ib 2V —1)) are the four factors of 
29 in R{V—5, V^). In fact, they happen to be principal. 

Now this formulation is based on 7 ?(a/ — 5), a quadratic field of class 
number 2. The definition can be extended to other quadratic fields and to 
nonquadratic fields. We find a peculiar occurrence in that the value of the 
theory depends on selecting definitions that make possible interesting 
theorems ! 

To give an example of the power of semantics, consider one further 
interpretation. We start this time with the rational field R and consider all 
“principal” ideals to be only those (a:) for which {djx) = 1 where d is the 
discriminant of a fixed quadratic field. The ideals for which (d/x) = — 1 are 
called “nonprincipal,” whereas the ideals for which (djx) = 0 are ignored 
in the designation. We can say that every ideal (a:) has a “principal” 
square since (djxy = (d/x^) = 1. Thus the “class number” is 2. The 
quadratic field R{V d) then provides a “class field” for R, for we note the 
analogous properties of primes p: 

(a) If {djp) = — 1, (/?) does not split in R{V d). 

(b) If (djp) = !,(/?) splits in R{V d). 

This interpretation is more than a trick. It was developed in detail by 
Takagi (1920). We must, however, abandon this line of speculation with 
the remark that determining the extent to which these interpretations of 
class fields can be stretched is the principal unsolved problem (rather than a 
lack of proofs to well-defined conjectures). 
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on the other hand, although 7^ becomes principal, it is unhappily capable 
of further factorization, indeed into two nonprincipal ideals. (We recall 
that since R{\ —S, V"^2) has algebraic numbers of degree 4, the rational 
primes could have four ideal factors.) The easiest way of explaining this 
fact is to note that, since (8/7) =+1,7 factors, (indeed as (3 + Vl) 
(3 - Vl)\ in R(V 2). These are “irreconcilable” with the two factors of 
7 in 7?(\/^), since 3 ± V2 does not divide all elements of 7^ (for instance, 
1 + iV — 5) in the sense that the quotient does not satisfy an algebraic 
equation (1) in rational integral coefficients. 

We must note, incidentally, that since (—2) = (+2), as ideals, R{V —2, 
V — 5) would illustrate the same thing as R{Vl, V —5). Dirichlet, some 
time earlier, had noticed that R{V — 5, V— 1) has class-number unity. 
This field contains V5 = — V— 5 V— 1. Thus, to factor a prime in 
R{\/~5, we can begin with any of the three fields R{V — 5), 

R{V~\), or R{V 5) and consider the effect of adjoining one other radical 
to it. 

Hilbert later noticed certain further remarkable properties that created 
the designation that 5, V — 1) is the class field of 7 ?(a/ — 5). 

(a) The nonprincipal prime ideals in R(V — 5) become principal prime 
ideals in R(V — 5, V— 1) {without splitting). 

For example, let ^ be a rational prime in the second genus: 



(19) 




= 2a^ + 2ab + 36^ 




(20) 


(2q 


= {2a + bf + 5b^ 




{49 


= {2a + b + VSbf + {2a + b- 


VSbf. 


Thus, finally, 








(21) 


9 = 


j2a + 6 + ^/5^^ ! — j 2fl + ^ ■ 


-VSfij 




^ jla b yj5b ! — j la + 


b — yj^b 
2 



and q has the two indicated principal ideals in R{V — 5, V —1), although 
not in R{V —5). The reader may wonder if q has further factors, but the 
answer is negative, since the genus {{Sjq) = (—1/^) = —1} makes q 
unfactorable in R{\^ 5), hence factorable into at most two factors (as shown) 
when V— 1 is adjoined to make R{Vs, V— 1) = R{V — 5, V— 1). 
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The proof is basically a transformation to an equation of lower index. 
Let /q ( ^ 3) be the index of (22) and let 

(27) |fl| < \b\ < Id 

(the equality holding only if \a\ = \b\ = 1). Then 

(28) 7o = kc| > \ab\. 



We solve (24^) by reducing modulo c so that it is < c/2 in absolute value. 
Then the new integer q can be defined : 

(29) q = {ar^^ + b)jc, 

(30) 1^1 < (|al c^/4 + ld)/ld = |ac|/4 + 1 < kd = h- 



Now the transformation 

(31) 

changes (22) to 



'x = bX+ r^Y, 
i y = r^aX - Y, 
z = qZ 



(32) 



abX^ + == 0 . 



If /' is the index of (32), 

(33) /'-max(kM,M)</o. 



If the coefficients ab and q have a common factor (> 1), (32) bears further 
reduction but /' can be shown to decrease or remain unchanged. This 
completes the descent. 

Now our problem is to prove that if the conditions (24 a, b, c, d) are 
valid for (23), they must also be valid for (32) (or whatever its reduced form 
might become if {ab, q)> 1). This is not easy and is indeed rather 
manipulative. 

Condition {lAa) on the sign of a, b, and c is easy, however, if we rephrase 
it as 

(34) »{■ +!»,' + «£■- 



Then it is clear that the linear transformation (31) transfers the real solution 
from (22) to (32), [The reader will find it easy but more annoying to prove 
the transfer of {24a) directly, i.e., to show from (29) that ab and q, in (32), are 
not both positive!] 

Can we similarly transfer conditions (24 b, c, d) from (22) to (32)? 
The transfer was originally made by brute force ! 
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GLOBAL AND LOCAL VIEWPOINTS 

We begin with a conventional problem of deciding whether or not the 
equation 

( 22 ) ax^ + by^ + = 0 

in rational integral (nonzero) coefficients a, b, c has a rational integral 
solution X, y, z not all zero. 

As a preliminary matter, we can make changes of variables so that a, b, 
and c are square-free (by absorbing a square factor in y^, or z^), and we 
can easily arrange that a, b, c be relatively prime in pairs (by a similar 
change of variables). Now Legendre’s theorem (1785) states that (22), 
subject to 

b, c square-free, 

(fl, b) = (Z>, c) = (c, a) = 1, 
has a solution if and only if 

{2Aa) a, b, c are not all of the same sign, 

(24b) ar^ + ^ = 0 (mod c) solvable for 

(24c) br^ + c = 0 (mod a) solvable for r 2 , 

(24d) cr^ + = 0 (mod b) solvable for r^. 

The conditions are clearly necessary for solvability of (22) indeed, 
ri = xjy (mod c), etc. (once the solution triple has been relieved of trivial 
common factors). 

The sufficiency is not easy. It is accomplished by the method of descent. 
We define the index of (22) as 

(25) / = max (\a\, \b\, |c|) x min (\al |Z?|, |c|). 

We shall show that if the theorem is true for all indices / < /q it is true for 
an equation of index /q. We see by inspection that the theorem is true when 
1=2. Listing the equations (and avoiding trivial repetitions), we find 



1 = 


1, 




+ 




+ 


z2 = 0; 


unsolvable, 




1 = 


1, 


X* 


+ 




— 


z* = 0; 


(x, y,z) = (1,0, 


1), 


/ = 


2, 




+ 




+ 


2z2 = 0; 


unsolvable, 




/ = 


2, 




+ 


y^ 


— 


22* = 0; 


(x, y, z) = (1, 1, 


1), 


/== 


2, 




— 




+ 


2z* = 0; 


(x,y, z) = (1, 1, 


0). 



Here the conditions (24^, c, ^^) are trivial, but condition {24d) does the job. 
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In the case of system (26) the reader can verify that condition (40a) picks out 
the unsolvable cases as surely as does (24a). (We recall that if x is odd, 
= 1 mod 8). More generally, if we dropped conditions (23), we should 
have to replace (40a) by 



(40h) 



+ hrf + c'(^ = 0 



solvable for p-adic integers (p = 2 inch), 
f, Tj, ^ not all zero. 



In modern parlance, the /7-adic conditions for p ^ 2, p odd, and /? = oo 
are “local” solutions to (22) in the “neighborhood” of a prime p. The 
solution in rational integers is a “global” solution. The global solution is 
(easily) a local solution for each prime, but these solutions also lead to a 
global solution (nontrivially) by Legendre’s method of descent. 

At this juncture number theory was strongly influenced by Riemann’s 
theory of complex functions (1852) [through a famous sequel of Dedekind 
and Weber (1880)]. According to Riemann’s approach, a complex function 
is completely determined by knowing the power series around the singu- 
larities. For instance, consider the equation in which the unknown x is a 
polynomial (not an integer). 



(41) x^ = (t^ • (r - (mi > 0). 



Here the are (different) real or complex numbers and are integers. 
We ask if a polynomial x = exists to satisfy (41). The answer is 
trivial, since (41) is solvable if and only if all are even integers. The 
“evenness of m/’ can be interpreted as saying that in the neighborhood of 
any a, a Taylor series exists for x such that 

(42a) x = + kit - a,) + kit - a,)* + • • • . 



If nti is odd, we should have, on the contrary, 

(421.) X = (/ - + kit - a,) + kit - a,)^ +•••]• 

The t = oL^ are similar to the p which divide abc (and /? = 2) of (22). In the 
neighborhood of the other values of t it is easy to show that a power series 
always exists as for the odd p f abc. 

The “p = oo” case is taken care of by the “order of magnitude”: 

(42c) X ‘ — ' + ‘ ■ ^ 00 , 



Thus we say x has a Taylor series at ^ = oo when Dm, is even. It is now 
clear that if we know about / = oo we can afford to be “ignorant” about, 
say, ? = aj (in the knowledge that is even if the same is true about each 
(i > 1), and Sm^). This is like ignoring p = 2 when we know about p = 
00 and odd primes. 
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A more elegant procedure emerged in the work of Hensel (1884) on 
/ 7 -adic integers. A p-adic integer is defined for a given prime p as the 
infinite formal power series with integral coefficients: 

( 35 ) ^ = px^^ p^x^ + • • ■ + p^x^ + • • • 

The series may terminate, representing an ordinary integer, or it may be 
infinite. For example, in Chapter 1, §8, we saw how to construct a series 
which formally satisfies (for odd p) 

(36) ^ A (mod p^) if (Ajp) = I 

by taking the terms of (35) up to The whole series would be a /?-adic 
representation of V^. 

By the Chinese remainder theorem, condition (24/?), for instance, states 
that for all odd p that divide c 

(37) + /? = 0 (mod p) is solvable. 

(Here /? = 2 is trivial.) Now an equivalent form of (37) is 

(38) + /? = 0, solvable for f a /?-adic integer. 

Finally it is fully equivalent to write (when p | c) 



(39) 



+ hrf + = 0^ 



solvable for i 
p-adic integers not all 0. 



Here condition (39) has the advantage that a, b, c need not be square-free 
or relatively prime in pairs (for the elimination of square-divisors and 
common factors would leave a /?-adic solution alone). Furthermore, a 
solution in /?-adic integers is completely transferable by transformations 
(31) (using elementary manipulation of power series). The only “catch” is 
that the primes p that divide abc in (22) are not necessarily those that divide 
abq in (32). Thus we must have one additional minor proof to show that 
(22) is readily solvable in /?-adic integers when p f abc, in other words, for 
all p. 

Now Legendre’s theorem states: 



The equation (22) is solvable in rational integers x, y, z if it is solvable in 
p-adic integers for all odd p and at the same time for real x, y, z. 



We note that the sign condition (24) can be interpreted as the existence of 
a /?-adic solution for /? = oo. 

We also note that there is an absence of concern for p = 2. Actually, 
this is an alternate (traditional) form of Legendre’s theorem, under 
conditions (23), in which the sign condition (24) is replaced by 



ax^ A- by^ A cz^ = 0 (mod 8) 



solvable for x, y, z, 
[not all even. 
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At any rate, the “local” solutions (42a), (42c) determine a so-called 
“global” solution: x = {t — ••*(/ — which in effect looks 

very different ! The reader should ponder the analogy carefully. 

Returning to number theory, the connection involving /? = 2,p odd, and 
p =z ao happens to be very much like the Hilbert condition 




The connection with the genus theory and quadratic reciprocity, however, 
is too involved to pursue at this juncture. 

There are other equations like (22) for which local solvability determine 
global solvability, but, unfortunately, they are both few in number and also 
esthetically unattractive. Generally, one might well wonder if ideal theory 
creates a sufficiently large number of primes to give “enough” local 
solvability conditions for global solvability. 

Just as the properties of the solution to a diophantine equation can be 
discussed locally, so can the properties (a) and (^?) of the class field be 
discussed locally by working “modulo with /?-adic series. The harder 
part consists in showing when the local properties can be “built into” a 
global solution or class field, as the case may be. This new development 
involved the complete rewriting of the foundations of algebraic number 
theory mostly by Artin, Chevalley, and Hasse. 

Thus the axiomatic formulation of number theory is still fluid after some 
2500 years. 
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appendix 



Table I Minimum prime 
divisors of numbers not divisible 
by 2, 3, or 5 from 1 to 18,000 



The material in this table has been extracted from Table de diviseurs 
pour tons les nomhres des \e, 2e, et 2e million, ou plus exactement, depuis la 
3,036,000, avec les nombres premiers qui s*y trouvent, by J. C. Burckhardt, 
Paris, 1817. 

The reader might accustom himself to usage of the table by these 
observations: in Table I-A the extreme lower right-hand entry (*) states 
that 19 is the minimum prime divisor of 8797 ; and in Table I-B the extreme 
upper left-hand entry (t) states that 9001 is prime. 
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Chapter XI: Sommer; Hasse (b); Bachmann (b); Uspensky and Heaslet. 

Chapter XII: Hecke; Fricke; Davenport; Pall. 

Chapter XIII: §1, Hecke; §2, Fueter; Fricke, p. 255; Dickson (a), p. 104; P. G. L, 
Dirichlet (Une Propriete des formes quadratiques a determinant positive), J. Math, 
pares appL, II, 1, (1856, pp. 76-79); §3, Sommer; G. Pall (Note on Irregular 
Determinants), J. Land, math, Soc., 11 (1936, pp. 34-35); §4, Hilbert; Hasse (a), 
p. 65; Jones (a). 

Concluding Survey: Hilbert; Artin; Hasse (a); Weyl; Chevalley. 
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TABLE I (continued) 

D: 9001-17999 




TABLE L PRIME FACTORS 






























TABLE I (continued) 
C: 1—8999 
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TABLE I (continued) 
E: 1-8999 
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Table II Power residues for 
primes less than 100 



The following table has been taken from Canon Arithmeticus, by C. G. J. 
Jacobi, 1839 (reprinted Berlin 1956). Here the base g is the least primitive 
root modulo p and = N (mod p). The reader might check his reading 
of the tables by noting that for p = '^7 the entry marked (*) means 
2^2 = 7 (mod. 37), whereas the entry marked (f) means 2^ = 8 (mod 37). 
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TABLE II (continued) 



p 23, g sr 5 
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TABLE II 



p = 3, g = 2 



N 1 


r I 




o 


X 


2 


















o 


X 


2 










■ 


O 




2 


I 








□ 








o 




2 


1 






□ 


□ 





p = 5. g = 2 



1 N 


I 




-Ij 


X 


2 


3 


4 














o 




2 


3 


4 






■ 


O 


□ 


2 


4 


3 


I 






□ 






o 




□ 




3 


2 






■ 



p = 7, g = 3 



N 


I 




_Lj 


X 


2 


3 


4 


5 


6 










o 


I 


2 


3 


4 


5 


6 


0 


□ 


E 


2 


6 


4 


E 


X 






□ 


o 




6 


2 




4 


5 


3 



p= 11, g = 2 
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TABLE II (continued) 























































Table III Class structures of 



quadratic fields of Jm for m less 
than 100 



This two-part table has been taken from Introduction a la theorie des 
nombres algebriques, by J. Sommer, Paris, 1911. In the following tables 
d stands for the discriminant and the basis is [1, co]. (Here co' denotes the 
conjugate.) The factors of the discriminant are listed in the order of the 
corresponding character symbols; except that when a real field has 
discriminant divisible by a prime q = — \ (mod 4) such a prime is listed 
first in d but omitted in the list of character symbols (see Chapter XIII, 

§ 3 ). 
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TABLE n (continued) 



p = 79 , g = 3 



5 1 


• » 1 






1 


2 


3 


4 


5 


D 


B 


B 


Bl 




0 


I 


B 


B 


B 


B 


D 


7 


8 


9 


o 




3 


9 


27 


2 


6 


18 


54 


4 


12 


0 




78 


4 


1 


8 


62 


5 


53 


12 


2 


1 




29 


8 


24 


?2 


58 


16 


48 


05 


37 


1 


66 


68 


9 


34 


57 


63 


16 


2! 


6 


32 


2 


3 * 


>7 


51 


74 


64 


34 


23 


69 


49 


68 


2 


70 


54 


72 


26 


*3 


46 


38 


3 


61 


II 


3 


46 


59 


19 


57 


*3 


39 


38 


35 


26 


78 


3 


67 


56 


20 


69 


25 


37 


10 


19 


36 


35 


4 


76 


70 


52 


77 


73 


61 


25 


75 


67 


43 


4 


74 


75 


58 


49 


76 


64 


30 


59 


>7 


28 


5 


50 


71 


55 


7 


21 


63 


3 * 


14 


42 


47 


5 


50 


22 


42 




7 


52 


65 


33 


«5 


3 * 


6 


62 


28 


5 


15 


45 


56 


10 


30 


11 


33 


6 


71 


45 


60 




24 


18 


73 


48 


29 


27 


7 


20 


60 


22 


66 


40 


41 i 


Di 


53 


B 


■ 


7 


41 


51 


M 




23 


47 


40 


43 


39 





p = 83 , g = 2 



N 


“i 1 




0 


1 


2 


3 


4 


5 


6 


7 


8 


9 


■ 


B 


I 


2 


3 


4 


5 


B 


n 


B 


9 


0 




2 


4 


8 


16 


32 


64 


45 


7 


14 


0 




82 


1 


72 


2 


27 


73 


8 


3 


62 


I 


28 


56 


29 


58 


33 


66 


49 


»5 


30 


60 


I 


28 


24 


74 


77 


9 


*7 


4 


56 


63 


47 


2 


37 


74 


65 


47 


11 


22 


44 


5 


10 


20 


2 


29 


80 


25 


60 


75 


54 


78 


52 


10 


12 


3 


40 


80 


77 


7 J 


59 


35 


70 


57 


31 


62 


3 


18 


38 


5 


14 


57 


35 


64 


20 


48 


67 


4 


41 


82 


81 


79 


75 


67 


51 


19 


38 


76 


4 


30 


40 


81 


7 * 


26 


7 


61 


23 


76 


16 


5 


69 


55 


27 


54 


25 


50 


17 


34 


68 


53 


5 


55 


46 


79 


59 


53 


51 


11 


37 


13 


34 


6 


23 


46 


9 


i8 


36 


72 


6x 


39 


78 


73 


6 


Mi 


66 


39 


70 


6 


22 


>5 


45 


58 


30 


7 


63 


43 


3 


6 


12 


24 


48 


>3 


26 


52 


7 


m 


33 


65 


69 


21 


44 


49 


32 


68 


43 


8 


21 


42 


I 








Mi 


1 


■1 




8 


19 


42 1 


42 

















p = 89 . g = 3 









N 


r 1 




0 


I 


2^ 


3 


4 


5 


B 


B 


B 


B 


■ 


□ 


B 


B 


B 


B 


B 


B 


B 


B 


B; 


0 




3 


9 


27 


81 


65 


>7 


51 


64 


DI 


IB 


B 


88 


B 


D 


Rl 


m 


la 


la 


la 


Bl 


1 


42 


37 


22 


66 


20 


60 


2 


6 


18 


54 


I 


m 


84 


19 


23 


9 


71 


64 


6 


x8 


B 


2 


73 


4 > 


34 


13 


39 


28 


84 


74 


44 


43 


2 


n 


82 


12 


57 


49 


52 


39 


3 


25 




3 


40 


3 » 


4 


12 


36 


19 


57 


82 


68 


26 


3 


87 


3 * 


80 


85 


22 


63 


34 


XX 


51 


24 


4 


78 


56 


79 


59 


88 


86 


80 


62 


8 


24 


4 


30 


21 


10 


29 


28 


72 


73 


54 


65 


74 


5 


72 


38 


25 


75 


47 


52 


67 


[1 


69 


29 


5 


68 


7 


55 


la 


J 9 


66 


41 


3 <> 


75 


43 


6 


87 


83 


7 » 


35 


16 


48 


55 


r. 3 


50 


61 


6 


IS 


69 


47 


la 


8 


5 


13 


56 


38 


58 


7 


5 


15 


45 


46 


49 


58 


85 


' m 


53 


70 


7 


m 


62 


50 


20 


27 


53 


67 


77 


40 


42 


8 


32 


7 


21 


63 


II 


33 


B 


E9 


B 




8 


B 


4 


37 


61 


26 


76 


45 


60 


44 





P = 97 , g = 5 



N 1 


r — — T ^ 




0 


I 


2 


3 


4 


5 




D 


B 


B 


■ 


B 


1 


2 


B 


B 


B 


B 


B 


B 


9 


0 




5 


25 


28 


43 


21 


■1 


m 


6 


30 


0 




'96" 


34 


m 


m 


■1 


m 


IB 


■1 


44 


I 


53 


71 


64 


29 


48 


46 


36 


83 


27 


38 


1 


35 


86 


42 


25 


65 


71 


40 


89 


78 


81 


2 


93 


77 


94 


82 


22 


13 


65 


34 


73 


74 


2 


69 


5 


24 


77 


76 


2 


59 


18 


3 


13 


3 


79 


7 


35 


78 


2 


10 


50 


56 


86 


42 


3 


9 


46 


74 


60 


27 


32 


16 


9 * 


19 


95 


4 


16 


80 


12 


60 


9 


45 


31 


58 


96 


92 


4 


7 


85 


39 


4 


58 


45 


*5 


84 


14 


62 


5 


72 


69 


54 


76 


89 


57 


91 


67 


44 


26 


5 


36 


63 


93 


10 


52 


87 


37 


55 


47 


67 


6 


33 


68 


49 


51 


61 


M 


70 


59 


4 


20 


6 


43 


64 


80 


75 


12 


26 


94 


57 


61 


52 


7 


3 


15 


75 


84 


32 


63 


24 


23 


18 


90 


7 


66 


II 


50 


28 


29 


72 


53 


21 


33 


30 


8 


62 


19 


95 


87 


47 


4 * 


HI 


B 


HI 


*7 


8 


41 


88 


23 


27 


73 


90 


38 


83 


92 


54 


9 


85 


37 


88 


52 


66 


39 


B 


B 


B 




9 


79 


56 


49 


20 


22 


82 


48 
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TABLE ra 

Part 1. Imaginary Fields 





CO 


d 


Ideal Structure 


Genus 


Structure 


Ideal t 


Class 


Class 


Character 


-1* 




-22 


(1)£ 


/ 


I 


+ 


-2 




-T 


(1)£ 


/ 


1 


+ 


-3t 


1 + 


-3 


(1)£ 


/ 


I 






2 












-5 




-22*5 


(1) 


mm 




+ + 








(2, 1 + V-5) 


H 






-6 




-2^ • 3 


(1) 


H 




+ + 








IT 

> 


HH 


■9 


- - 


-7 


1 + 


-7 


(1)£ 


/ 


/ 


+ 




2 












-10 




-2® • 5 


(1) 




A^ 


+ + 








(2, V-lO) 


A 


A 


— — 


-11 


1 + 


-11 


(1)£ 


I 


I 


+ 




2 












-13 


V^u 


-2*- 13 


(1) 


A^ 


A^ 


+ + 








(2, 1 + V-13) 


A 


A 


— — 


-14 


V^Ti 


-2^-7 


(1) 














(3,1 - V-14) 


P 




+ + 








(2, 














(3, 1 + V-M) 


J 


j] 




-15 


1 + VM5 


-3 ■ 5 


(1) 


A'^ 


A’^ 


+ + 




2 




(2, 1 + cu) 


A 


A 





* This field contains the units ±V —I in addition to ±1. 
t This field contains the units ±co, ±o)' in addition to ±1. 

t The Euclidean fields are designated by E; there is no other quadratic field 
beyond this table. 
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TABLE III, Part 1 (continued) 





(0 


d 


Ideal Structure 


II Genus Structure 


IdealJ 


Class 


Class 


Character 


-42 




-2> • 3 • 7 


(1) 








+ + H- 








(7. V-42) 


AAi 


AA, 


+ 








(3, V-42) 


Ai 


Ai 


- + - 








(2, V-42) 


A 




A 


+ 




1 -1- V— 43 






miB 








-43 


2 


-43 


(1) 


■ 




I 


+ 


-46 




-2^ • 23 


0) 


j* 


P 


\ 










(5,2 - V-46) 


r 




1 


+ + 








? 

1 

> 


r 


P 


1 










(5,2 + V-46) 


j 


J 


1 






1 -j. V-47 














-47 




-47 


(1) 




P 








L 




(2. 1 + (O') 


J* 


P 












(3,o>') 


p 


P 


1 










(3,w) 


p 


P 












(2, 1 + (o) 


J 


J ^ 








1 4- V-51 














-51 




-3 17 


(1) 




A^ 


+ + 




L 




(3, 1 + a.) 


1 A 


A 


- - 


-53 




-2=* ♦ 53 


(1) 


P 


/•] 












(3, 1 - V-53) 


P 


•"‘i 




4- + 








(9, 1 - V-53) 


P 














(2, 1 + V-53) 


P 




1 










(9, 1 + V-53) 


P 




I 


- - 








(3, I + V-53) 


J 


! 


1 






1 - 1 - V— 55 














-55 




-5- 11 


(1) 


P 


P\ 








2 




(2,«)') 


P 






4- + 








(5, 2 +co) 


P 














(2,<o) 


J 








-57 




-2^ ■ 3 ■ 19 


(1) 


A^A^^ 


/IMi 


2 


4- 4- + 








(2, 1 + V-57) 


AAy 


AA 


1 


+ - - 








(3, V3J^ 


Ai 


A 


1 


- 4- - 








(6, 3 + V-57) 


A 


A 


f 


- - + 
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TABLE III, Part 1 (continued) 





CO 


d 


Ideal Structure 


Genus Structure 


IdealJ 


Class 


Class 


Character 




1 + 












— 67 


2 


—67 


(1) 


/ 


/ 


+ 


-69 


It 

> 


-2^ • 3 • 23 


(1) 


J* 














(7, 1 - V-69) 


P 






+ + + 








(6,3 + V-69) 


P 


AJ^ 












(7, 1 + V-69) 


J 


AJ 












(5, 1 + V-69) 


AP 














(3, V^) 


AP 


J 




” “T — 








(5, 1 - V^) 


AJ 


AJ^ 












(2, 1 + V^) 


A 


A 




- + 


-70 


< 

1 1 
o 1 


-2» • 5 • 7 


(1) 


AU,^ 


A^A 


2 


+ + + 








(7, V-70) 


AAi 


AAy 


+ 








(5, V-70) 


A, 


A 


- + - 








(2, V-70) 


A 


A 


+ 




1 + V-71 












-71 


2 


-71 


(1) 


P 


P 












(2, a.') 


P 


/« 












(5, 1 + o>0 


P 


y® 












(3, 2 + 0)) 


P 


y" 


► 


+ 








(3, 2 + 0)') 


P 


y® 












(5, 1 + w) 


P 


y2 












(2,0)) 


J 


y 






-73 


< 
1 1 
1 


-2" • 73 


(1) 


P 














(7,2 - V-73) 


P 


A 




+ + 








(2, 1 + V3^) 


P 














(7,2 + V-73) 


J 


J ) 






-74 


1 

1 1 
> 


_23 . 37 


(1) 


P 


J^' 












(11,5 - V-74) 


P 


J^ 












(3, 1 - V-74) 


P 


J^ 




+ + 








(3, 1 + VH^) 


P 


y2 












(11,5 + V~i,) 


J 


y 












(5, 1 - VH^) 


AP 


AJ^' 












(6, 2 + V-74) 


AP 


AP 












(6, 2 - VIT74) 


AP 


AJ^ 




— — 








(5, 1 + V~A) 


AJ 


AJ 












(2, V-74) 




A 
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TABLE III, Part 1 (continued) 





m 


d 


1 Ideal Structure 


Genus Structure 


Ideal 1 


Class 


Class 


Character 


-87 


1 + VlTs? 


-3-29 


(1) 




P 








2 




(2, w') 




P 




+ + 








(7, 2 + (o) 


J* 


P 


1 










(3, 1 + (o) 




P 












(7, 2 + CO') 




P 




- - 








(2.CO) 


J 








-89 




-2^ • 89 


(1) 




P^ 












(3, 1 - V-89) 




P^ 












(17, 8 - V-89) 




P 




+ + 








(7,4 - V-89) 


r 


P 


1“ 










(5, 1 - V-89) 


y» 


P 












(6, 1 + V-89) 


p 


P 












(2, 1 + V-89) 


p 


P^* 












(6, 1 - V-89) 


p 


P 












(5, 1 + V-89) 


p 


P 












(7,4 + V-89) 


p 


P 












(17, 8 + V-89) 


p 


P 












(3, 1 + V^) 


J 


J 






-91 


1 + 


1 

-7 - 13 


(I) 


m 


A^ 


+ + 








(7, 3 + co) 




A 




- - 


-93 




-2^ • 3 • 31 


(1) 






2 


+ -f + 








(6, 3 + V-93) 


AA^ 


AA 


1 


+ 








< 

1 

SO 




A 


1 


“ + - 








(2, 1 + V-93) 


A 


A 




+ 


-94 


V^94 


-2® . 47 


(1) 


P 


P 












(5, 1 - V-94) 


P 


P 












(7, 2 - 


P 


P 




+ + 








(11,4 + V-94) 


P 


P 












(2, V-94) 


P 


P 












(11,4 - V^95) 


P 


P 












(7,2 + V-94) 


P 


P 












(5, 1 + V-94) 


J 


J 







269 
















/ 



TABLE ni, Part I (continued) 





0} 




Ideal Structure 


Genus Structure 






IHES9H 


Class 


Class 


Character 


-77 




-22-7 - 11 


(1) 

(3,1 - V-77) 


P 

P 


P 

P 




+ + + 








(14,7 + V-77) 
(3, 1 + V3t7) 


P 

J 


AP 

AJ 




+ - - 








(6, 1 - V-77) 
(7, V-77) 


AP 

AP 


AJ^ 

A 




- + - 








(6, 1 + V-77) 
(2, 1 + V3t7) 


AJ 

A 


J 




~ + 


-78 


VZt8 


-2^*3 13 


0) 


A^Ai^ 


A'^A 


2, 


+ + + 








(2, V-78) 


AAi 


AA^ 


+ - - 








(13, V-78) 


A 


/ 


u 


- + - 








(3, V-78) 


A 




4 


+ 


-79 


1 + V^T9 

O 


-79 


(1) 


P 










L 




(2, 1 + coO 


P 














(5, w') 


P 






+ 








(5,«) 


P 


/2 












(2, 1 + (jS) 


J 


J 






-82 




-2» • 41 


0) 

(7,3 - V-82) 


P 

P 


J*\ 




-f + 








(2, V^i^) 


P 














(7,3 + V-82) 


J 


•/ ) 






-83 


1 + ^^83 
2 


-83 


(1) 

(3, w') 


P 

P 














(3,«>) 


\ J 


J J 






-85 




-22 ■ 5 • 17 


(3) 


A^A,^ 


A^A^ 


2 


4- + + 








(5, V -85) 


AAr 


AA 


1 


+ — — 








(10, 5 + V^) 


Ai 


A 


1 


- + - 








(2, 1 + VIT85) 


A 


> 




- - + 


-86 




-2^ ■ 43 


0) 


P^ 














(3, 1 - V-86) 


P 














(9,2 + VZ86) 


P 


y® 




+ + 








(5, 2 + Vrs6) 


P 


y* 












(17,4 - VIT^) 


P 


y2 ^ 












(2, V-86) 


P 


y« ' 












(17,4 + V^l86) 


P 


p 












(5, 2 - V3^) 


P 


y® 




— 








(9,2 - V:i86) 


P 


y2 












(3, 1 + V1T86) 


J 


y 
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TABLE m 
Part 2. Real Fields* 





CO 


d 


V 


Niv) 


Ideal Structure 


Genus 

Structure 




Class 


Class 


Char- 

acter 


2 


V2 


2* 


1 + V2 


-1 


(i)£ 


I 


n 


+ 


3 


V3 


3 .22 


2 + V3 


+ 1 


a)E 


I 


9 


+ 


5 






CO 


-1 


(1)£ 


I 


B 


+ 


6 


V6 




5 + 2V6 


+ 1 


WE 


/ 


9 


+ 


7 


V? 


7-22 


8 + 3V7 


+ 1 


WE 


1 


1 


+ 


10 


VTq 


2^ ■ 5 


3 + Vio 


-1 


w 


A2 


A2 


+ + 












(2, VlO) 


A 


A 


— 


11 


vn 


11 -22 


10 + 3V11 


+ 1 


WE 


I 


1 


+ 


13 


1 + vB 
2 


13 


1 + CO 


-1 


WE 


I 


I 




m 






15 + 4V'14 


+ 1 


w 


I 


I 


+ 


15 


Vl5 


3 • 22 • 5 


4 + ^15 


+ 1 


w 




A^ 


+ + 












(2, 1 + Vl5) 


A 


A 


— 




1 4- Vl7 
















17 


2 


17 


3 -I" 2co 


-1 


(1)£ 


I 


I 


+ 


19 


V\9 


19*22 


170 + 39Vi9 


+ 1 


(1)£- 


I 


I 


+ 




1 + V2I 
















21 


2 


3-7 


2 + to 


+ 1 


(1)£ 


I 


I 


+ 


22 


V22 


11 2* 


197 + 42V22 


+ 1 


(1) 


I 


I 


+ 


23 


V23 


23 *22 


24 + 5V23 


+ 1 


(1) 


I 


I 


-h 


26 


V26 


23-13 


5 + V26 


1 -1 


(1) 


/<2 


A^ 


+ + 










1 


(2, V26) 


A 


A 


— 



* The fundamental units are designated by r}. 

t The Euclidean fields are designated by E; there is no other quadratic field 
beyond this table. 
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TABLE III, Part 1 (continued) 





OJ 


d 


Ideal Structure 


Genus Structure 


Ideal t 


Class 


Class 


Character 




1 -I- V-9 5 














-95 




-5 • 19 


(1) 




P 








A 




(2, 1 + cu') 


r 


P 












(4, 1 - cuO 




P 




+ 4- 








(3,0)') 


p 


P 












(5, 2 + o>) 


p 


< 

P 












(3,0)) 


p 


P 












(4, 1 - w) 


p 


P 












(2, 1 + co) 


j 


J 






-97 




-22 • 91 


0) 


p 






+ + 








(7, 1 - V-97) 


p 


j^i 












(2. 1 + V^) 


p 















(7, 1 + V-97) 


j 


J ) 
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TABLE m, Part 2 (continued) 





(0 


d 


V 


N(i]) 


Ideal Structure 


Genus 

Structure 


Ideal! 


Class 


Class 


Char- 

acter 


55 


Vw 


11 -22 -5 


89 + I 2 V 55 


+ 1 


0) 




A^ 


“f + 












( 2 , 1 + V 55 ) 


A 


A 


— 


57 


1 + Vyi 
2 


3 • 19 


131 +40w 


+ 1 1 

1 


(1)£ 


I 


I 


+ 






23-29 




B 


(1) 


A^ 


A^ 


+ + 




IH 






■ 


(2, V58) 


A 


A 


— 




V 59 


59*22 

i 


530 + 69 V 59 


+ 1 


(1) 


I 


I 


+ 




1 + 

2 


61 


17 + 5o> 


-1 


(1) 


1 


I 


+ 


62 


V62 


31 *2® 


63 + 


*fl 


(1) 


I 


I 


+ 




1 4- V65 
















65 




5 • 13 


7 + 2o) 


-1 


(1) 


A^ 


A^ 


+ + 




2 








(5, 2 + co) 


A 


A 


— 


66 




*3*22- 11 


65 + 


+ 1 


(1) 


A^ 


A^ 


+ 4* 












(3, V66) 


A 


A 


— 


67 




67*22 


48842 + 5967^67 


+ 1 


(1) 


I 


I 


4* 




1 + 
















69 


2 


3 *23 


11 +3ft) 


+ 1 


(1) 


I 


I 


+ 


70 


Vto 


7 • 2® ♦ 5 


251 + 30Vto 


•fl 




A^ 


A^ 


4- 4* 












(2. VlO) 


A 


A 


— 


71 


VtI 


71 •2'* 


3480 + 413V^ 


+ 1 


(1) 


i 


B 


+ 




1 -}- 










s 


s 




73 




73 


943 + 250o> 


-1 


(!)£' 






+ 




2 










II 


H 




74 


^TA 


22*37 


43 + sVt4 


-1 


(1) 


>42 


^2 


4- 4* 












( 2 , V 74 ) 


A 


A 


— 
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TABLE III, Part 2 (continued) 





w 


d 


V 


N(v) 


Ideal Structure 


Genus 

Structure 


Ideal t 


Class 


Class 


Char- 

acter 


29 


1 + V29 
2 


29 


2 + cu 


-1 


(1)£ 


I 


I 


•f 


30 


V30 


3-23-5 


11 + 2V30 


+ 1 


(1) 




A^ 


+ + 












(2. V3O) 


A 


A 


— 


31 


V31 


31-23 


1520 + 273^^1 


+ 1 


(1) 


I 


I 




33 


1 + V33 


3-11 


19 + 8co 


+ 1 


(l)E 


I 


I 


+ 




2 
















34 


V34 


23-17 


35 + eVS 


+ 1 


(1) 


A^ 


A^ 


+ + 












(3, 1 + V34) 


A 


A 


— 


35 


V35 


7-23-5 


6 + V35 


+ 1 


(1) 


A^ 


A^ 


+ + 












(2, 1 + V35) 


A 


A 


— 


37 


1 + V37 
2 


37 


5 -|- 2(0 


-1 


(1)£ 


I 


I 


+ 


38 


Vai 


19-23 


37 + 6^38 


+ 1 


(1) 


I 


I 


+ 


39 


V39 


3-23-13 


25 + 4V39 


+ 1 


0) 


A^ 


A^ 


+ + 












(2, 1 + V39) 


A 


A 


— 


41 


1 + V41 


41 


27 + lOoj 


-1 


(1)£ 


I 


I 


+ 




2 1 
















42 


V42 


3-23-7 


13 + 2V42 


+ 1 


(1) 


A^ 


A^ 


+ 4- 












(2, V42) 


A 


A 


— 


43 


V43 


43-23 


3482 + 531 V43 


+ 1 


(1) 


I 


1 




46 


V46 


23-23 


24335 + 3588V46 


+ 1 


(1) 


I 


I 


+ 


47 


V47 


47-23 


48 + iVTl 


+ 1 


(1) 


I 


I 


H- 


51 


V5I 


3-23-17 


50 + 7 V 5 I 


+ 1 


(1) 


A^ 


A^ 


+ + 












(3, V 51 ) 


A 


A 


— 


53 


1 +V 53 


53 


3 + CO 


-1 


(1) 


1 I 


I 


+ 




2 
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